Skip to content

Commit

Permalink
Merge pull request #82 from stacklok/pinned-tags-branch
Browse files Browse the repository at this point in the history
Don't hardcode `main` branch for actions_check_pinned_tags rule type
  • Loading branch information
JAORMX authored Apr 10, 2024
2 parents 2497bf3 + 42d619e commit 6ae9a2c
Showing 1 changed file with 2 additions and 3 deletions.
5 changes: 2 additions & 3 deletions rule-types/github/actions_check_pinned_tags.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -38,8 +38,7 @@ def:
# Defines the configuration for ingesting data relevant for the rule
ingest:
type: git
git:
branch: main
git: {}
# Defines the configuration for evaluating data ingested against the given profile
# This example uses the checks for that GitHub actions are using pinned tags
# for the use directive, in the form of SHA-1 hash.
Expand Down Expand Up @@ -117,4 +116,4 @@ def:
# Defines the configuration for alerting on the rule
alert:
type: security_advisory
security_advisory: {}
security_advisory: {}

0 comments on commit 6ae9a2c

Please sign in to comment.