From 42d619ecef3b431745f5999e4b0dd32c78cf4fc0 Mon Sep 17 00:00:00 2001 From: Juan Antonio Osorio Date: Wed, 10 Apr 2024 14:49:22 +0300 Subject: [PATCH] Don't hardcode `main` branch for actions_check_pinned_tags rule type Signed-off-by: Juan Antonio Osorio --- rule-types/github/actions_check_pinned_tags.yaml | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/rule-types/github/actions_check_pinned_tags.yaml b/rule-types/github/actions_check_pinned_tags.yaml index 708289d..ab2d34d 100644 --- a/rule-types/github/actions_check_pinned_tags.yaml +++ b/rule-types/github/actions_check_pinned_tags.yaml @@ -38,8 +38,7 @@ def: # Defines the configuration for ingesting data relevant for the rule ingest: type: git - git: - branch: main + git: {} # Defines the configuration for evaluating data ingested against the given profile # This example uses the checks for that GitHub actions are using pinned tags # for the use directive, in the form of SHA-1 hash. @@ -117,4 +116,4 @@ def: # Defines the configuration for alerting on the rule alert: type: security_advisory - security_advisory: {} \ No newline at end of file + security_advisory: {}