-
Notifications
You must be signed in to change notification settings - Fork 30
RED-1097: Added initial aviary.yaml file. #5
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
RED-1097: Added initial aviary.yaml file. #5
Conversation
RavenNumber of Findings: 1
As a result of the finding(s) listed above, a security review is required for this pull request. |
|
+1 |
security +1 |
aviary.yaml
Outdated
version: 1 | ||
|
||
exclude: | ||
- test?/ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@mairaemperley-wf Just noticed this - it should be either tests?/ or test/
test?/ will match both test/ and tes/
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Good catch! Fixed.
Current coverage is 87.87% (diff: 100%)@@ master #5 diff @@
==========================================
Files 2 2
Lines 66 66
Methods 0 0
Messages 0 0
Branches 0 0
==========================================
Hits 58 58
Misses 8 8
Partials 0 0
|
+1 |
@ericanders-wf do you want to update your security review for the latest commit? |
+1 security |
QA may be done on release of this |
QA review can be found here: https://jira.atl.workiva.net/browse/RM-15979 |
This is adding an initial aviary.yaml file to support Aviary/Raven scanning of this repository. Currently the file excludes the test, example, and functional_test directories from global keyword scanning, but adds no explicitly watched files or functions.
FYI @travissanderson-wf - If you know of any areas of the application that might be considered sensitive, please let me know or add them to the config directly. If you have any questions about this process please reach out in the "Infosec Forum" hipchat room.
@infosec-wf