awslabs/simple-code-scanning-pipeline issues and pull requests

#47 - Do a Bugfix Release

Issue - State: open - Opened by bmorrissirromb 10 months ago

#46 - Generate DSR spreadsheet automatically via Neolifter

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#45 - Remove folder structure for CFTs, just figure out what's a CFT and what's not automatically

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#44 - PsScriptAnalyzer for PowerShell

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#43 - Allow support for bringing your own scan_results_bucket from home

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#42 - Add C# SAST Support

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#41 - Running `cdk deploy` with no parameters on the synthesized stack fails with unset parameter `tfsecExcludeList`

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#40 - Normalize outputs for findings so that they can be sent to DSR tool in a consistent format/schema

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#39 - Clearly document use cases and limitations for this code

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#38 - Replace shellcheck with bashate

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#37 - Enable use of SCSP CodeBuild Job(s) in other CodePipeline pipelines

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#36 - Add integration with Amazon delivery portal -- send results there to document what was scanned/delivery

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#35 - Un-ignore certain files in the starter repos

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#34 - Ensure that all tools return some basic level of output to $projectName.log, no matter what

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#33 - Add an optional parameter for CodeBuild Project runtime

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#32 - SCSP via Pre-Commit

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#31 - Add JSHint tool

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#30 - Investigate Codestar connection for Github source action

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#29 - include summary.txt in the tar.gz

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#28 - Add an option (or just make it the default) to suppress stylistic errors (eg. whitespace, newlines)

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#27 - Update .gitignore for GoldenPipeline repo itself

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#26 - Add License Checking Tool

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#25 - Extensibility for Golden Pipeline actions to be used by other pipelines

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#24 - Workshop with details on how to use+integrate+modify Golden Pipeline

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#23 - Subject the GoldenPipeline itself to cdk-nag scanning

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#22 - Add support for ClamAV CodeAction

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#21 - Add check for ECR images via ECR service

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#20 - Review DSRs standards to make sure we can be the preferred tool!

Issue - State: closed - Opened by bmorrissirromb about 1 year ago

#19 - Add Support for Existing Gitlab and or Github Repositories

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#18 - Review Combobulator to see if it would make sense to add

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#17 - Review AWS-DevSecOps-Factory to see what tools could be used

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#16 - Add Cfn Policy Validater Action

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#15 - Add GitSecrets action

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#14 - Add NbConvert Action for Jupyter Notebooks

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#13 - Add Npm-Audit action

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#12 - Add CodeGuru action

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#11 - Automate one-click CFT releases

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#10 - Add Synk scanning

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#9 - Add OPA Scan

Issue - State: open - Opened by bmorrissirromb about 1 year ago

#8 - Checkov doesn't explain why it can pass with failures -- call out the minimum criticality better

Issue - State: open - Opened by bmorrissirromb about 1 year ago - 1 comment

#7 - Bump aws-cdk-lib from 2.47.0 to 2.80.0 in /initial_repos/initial_scsp_repo_bad/cdk-nag-ify

Pull Request - State: open - Opened by dependabot[bot] about 1 year ago
Labels: dependencies

#6 - Bump aws-cdk-lib from 2.27.0 to 2.80.0 in /initial_repos/initial_scsp_repo_good/cdk_projects/cdk_nag_test

Pull Request - State: open - Opened by dependabot[bot] about 1 year ago
Labels: dependencies

#5 - Bump aws-cdk-lib from 2.47.0 to 2.80.0 in /initial_repos/initial_scsp_repo_good/cdk-nag-ify

Pull Request - State: open - Opened by dependabot[bot] about 1 year ago
Labels: dependencies

#4 - Bump aws-cdk-lib from 2.50.0 to 2.80.0

Pull Request - State: open - Opened by dependabot[bot] about 1 year ago
Labels: dependencies

#3 - Bump aws-cdk-lib from 2.47.0 to 2.80.0 in /initial_repos/cdk-nag-ify

Pull Request - State: open - Opened by dependabot[bot] about 1 year ago
Labels: dependencies

#2 - Bump aws-cdk-lib from 2.47.0 to 2.80.0 in /initial_repos/initial_scsp_repo/cdk-nag-ify

Pull Request - State: open - Opened by dependabot[bot] about 1 year ago
Labels: dependencies

#1 - Bump aws-cdk-lib from 2.27.0 to 2.80.0 in /initial_repos/initial_scsp_repo_bad/cdk-projects/cdk_nag_test

Pull Request - State: open - Opened by dependabot[bot] about 1 year ago
Labels: dependencies

GitHub / awslabs/simple-code-scanning-pipeline issues and pull requests