Description
It would be useful to have a way to mark a script as “trusted” in the GitHub Action check. At the moment, even if a script’s integrity is checked to remediate the remote-script-exec security pattern, there is no mechanism to persist that trust decision. We might be able to add a suppression annotation to allow Macaron skip a specific pattern.
Description
It would be useful to have a way to mark a script as “trusted” in the GitHub Action check. At the moment, even if a script’s integrity is checked to remediate the
remote-script-execsecurity pattern, there is no mechanism to persist that trust decision. We might be able to add a suppression annotation to allow Macaron skip a specific pattern.