Pattern: Disabled GitHub vulnerability alerts
Issue: -
GitHub repository should be set to use vulnerability alerts.
You can do this by setting the vulnerability_alerts
attribute to 'true'.
Resolution: Enable vulnerability alerts.
Example of incorrect code:
resource "github_repository" "bad_example" {
name = "example"
description = "My awesome codebase"
vulnerability_alerts = false
template {
owner = "github"
repository = "terraform-module-template"
}
}
Example of correct code:
resource "github_repository" "good_example" {
name = "example"
description = "My awesome codebase"
vulnerability_alerts = true
template {
owner = "github"
repository = "terraform-module-template"
}
}