Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add security scanners to the pipeline #19

Closed
pmoros opened this issue Mar 8, 2024 · 0 comments · Fixed by #94
Closed

Add security scanners to the pipeline #19

pmoros opened this issue Mar 8, 2024 · 0 comments · Fixed by #94
Assignees
Labels
devsecops DevSecOps issues

Comments

@pmoros
Copy link
Contributor

pmoros commented Mar 8, 2024

Security scanners should be added to repository so as to reduce the chance of having security problems in the future. A initial proposal is adding a security-scanners.yml workflow to the current Github Actions. This would perform these actions:

  1. Check Gitleaks: verify that there aren't any leaks in the repository such as API Keys, Tokens or any other credentials
  2. Perform security checks: this checks if there is any sort of vulnerability regarding to our dependencies, a deprecated library of a new vulnerability in our runtime for example.
@este6an13 este6an13 added the enhancement New value label Mar 9, 2024
@este6an13 este6an13 added devsecops DevSecOps issues and removed enhancement New value labels Mar 16, 2024
@pmoros pmoros self-assigned this Mar 21, 2024
@pmoros pmoros linked a pull request Jul 11, 2024 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
devsecops DevSecOps issues
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants