Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

RuleType to check for dangerous workflows #175

Open
puerco opened this issue Jul 11, 2024 · 0 comments
Open

RuleType to check for dangerous workflows #175

puerco opened this issue Jul 11, 2024 · 0 comments
Labels
P1 Fix Soon: High priority items that should be considered in the next Sprint planning cycle

Comments

@puerco
Copy link
Contributor

puerco commented Jul 11, 2024 •
edited by evankanderson
Loading

Minder should check pull requests and recurrently on the repo for dangerous workflows. For example those that execute code at the pull request target. At PR time we could block, on recurring jobs we could look for an ever increasing test suite that analyzes the workflow files.
@mesembria mesembria added the P1 Fix Soon: High priority items that should be considered in the next Sprint planning cycle label Oct 8, 2024
@mesembria mesembria transferred this issue from mindersec/minder Oct 8, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
P1 Fix Soon: High priority items that should be considered in the next Sprint planning cycle
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@puerco @mesembria