Skip to content

v0.2.0 — Custom Rule Engine

Choose a tag to compare

View all tags
@9t29zhmwdh-coder 9t29zhmwdh-coder released this 13 Jul 13:15
v0.2.0
6974f93
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • Custom rule engine: ghass scan --rules <file.yml> evaluates org-specific policy rules from a YAML file alongside the built-in analyzers. Each rule matches at step, job, or workflow level (inferred from which condition it uses) via uses_matches, run_contains, env_key_contains, runs_on_contains, job_write_all, trigger_equals, workflow_write_all, and the combinators all/any/not. Matches show up in every existing output format tagged Custom Rule: <id>. See the new "Custom Rules" README section and examples/custom-rules.yml.

Fixed

  • ghass --version now reads the crate version from Cargo.toml instead of a hardcoded string that had drifted out of sync with actual releases.

Full Changelog: v0.1.8...v0.2.0

Assets 2
Loading