Merge pull request #118 from stacklok/ethomson/alerts_off

Profiles should not alert by default
mindersec · May 30, 2024 · ffdea5a · ffdea5a
2 parents 4a56a2e + 882c42e
commit ffdea5a
Show file tree

Hide file tree

Showing 11 changed files with 15 additions and 15 deletions.
diff --git a/profiles/github/dependabot_ghactions.yaml b/profiles/github/dependabot_ghactions.yaml
@@ -6,10 +6,10 @@ name: dependabot-github-actions-github-profile
 display_name: Dependabot for GitHub Actions
 context:
   provider: github
-alert: "on"
+alert: "off"
 remediate: "off"
 repository:
   - type: dependabot_configured
     def:
       package_ecosystem: github-actions
-      schedule_interval: daily
+      schedule_interval: daily
diff --git a/profiles/github/dependabot_go.yaml b/profiles/github/dependabot_go.yaml
@@ -6,11 +6,11 @@ name: dependabot-go-github-profile
 display_name: Dependabot for Go projects
 context:
   provider: github
-alert: "on"
+alert: "off"
 remediate: "off"
 repository:
   - type: dependabot_configured
     def:
       package_ecosystem: gomod
       schedule_interval: daily
-      apply_if_file: go.mod
+      apply_if_file: go.mod
diff --git a/profiles/github/dependabot_npm.yaml b/profiles/github/dependabot_npm.yaml
@@ -6,7 +6,7 @@ name: dependabot-npm-docs-github-profile
 display_name: Dependabot for JavaScript projects
 context:
   provider: github
-alert: "on"
+alert: "off"
 remediate: "on"
 repository:
   - type: dependabot_configured

diff --git a/profiles/github/dependabot_pip.yaml b/profiles/github/dependabot_pip.yaml
@@ -6,11 +6,11 @@ name: dependabot-pip-github-profile
 display_name: Dependabot for Python projects
 context:
   provider: github
-alert: "on"
+alert: "off"
 remediate: "off"
 repository:
   - type: dependabot_configured
     def:
       package_ecosystem: pip
       schedule_interval: daily
-      apply_if_file: requirements.txt
+      apply_if_file: requirements.txt
diff --git a/profiles/github/dependabot_rust.yaml b/profiles/github/dependabot_rust.yaml
@@ -6,7 +6,7 @@ name: dependabot-rust-github-profile
 display_name: Dependabot for Rust projects
 context:
   provider: github
-alert: "on"
+alert: "off"
 remediate: "off"
 repository:
   - type: dependabot_configured

diff --git a/profiles/github/dependencies.yaml b/profiles/github/dependencies.yaml
@@ -6,7 +6,7 @@ name: dependencies-github-profile
 display_name: Dependencies Security
 context:
   provider: github
-alert: "on"
+alert: "off"
 remediate: "off"
 pull_request:
   - type: pr_vulnerability_check

diff --git a/profiles/github/ghas.yaml b/profiles/github/ghas.yaml
@@ -6,7 +6,7 @@ name: ghas-profile
 display_name: GitHub Advanced Security settings
 context:
   provider: github
-alert: "on"
+alert: "off"
 remediate: "off"
 repository:
   - type: secret_scanning

diff --git a/profiles/github/profile.yaml b/profiles/github/profile.yaml
@@ -6,7 +6,7 @@ name: acme-github-profile
 display_name: Sample Profile
 context:
   provider: github
-alert: "on"
+alert: "off"
 remediate: "off"
 repository:
   - type: automatic_branch_deletion

diff --git a/profiles/github/repo_security.yaml b/profiles/github/repo_security.yaml
@@ -6,7 +6,7 @@ name: repository-github-profile
 display_name: Repository Security
 context:
   provider: github
-alert: "on"
+alert: "off"
 remediate: "off"
 repository:
   - type: secret_scanning

diff --git a/profiles/github/trivy.yaml b/profiles/github/trivy.yaml
@@ -6,8 +6,8 @@ name: trivy-github-profile
 display_name: Trivy action is enabled
 context:
   provider: github
-alert: "on"
+alert: "off"
 remediate: "off"
 repository:
   - type: trivy_action_enabled
-    def: {}
+    def: {}
diff --git a/profiles/github/workflow_security.yaml b/profiles/github/workflow_security.yaml
@@ -6,7 +6,7 @@ name: workflow-security-github-profile
 display_name: GitHub Actions workflow security
 context:
   provider: github
-alert: "on"
+alert: "off"
 remediate: "off"
 repository:
   - type: actions_check_pinned_tags