Open Issues Need Help
View All on GitHub good first issue
Decode and validate GitHub Actions OIDC token claims against an expected-claims policy - a CI gate against trust-policy drift
Python
#aws#aws-iam#ci#cicd-security#github-actions#iam#jwt#least-privilege#oidc#security#supply-chain-security
Add --fail-on <severity> threshold gating about 9 hours ago
good first issue
Decode and validate GitHub Actions OIDC token claims against an expected-claims policy - a CI gate against trust-policy drift
Python
#aws#aws-iam#ci#cicd-security#github-actions#iam#jwt#least-privilege#oidc#security#supply-chain-security
Support the GitLab CI OIDC 'sub' format alongside GitHub's about 9 hours ago
good first issue
Decode and validate GitHub Actions OIDC token claims against an expected-claims policy - a CI gate against trust-policy drift
Python
#aws#aws-iam#ci#cicd-security#github-actions#iam#jwt#least-privilege#oidc#security#supply-chain-security
Emit SARIF so findings show up in the GitHub Security tab about 9 hours ago
good first issue
Decode and validate GitHub Actions OIDC token claims against an expected-claims policy - a CI gate against trust-policy drift
Python
#aws#aws-iam#ci#cicd-security#github-actions#iam#jwt#least-privilege#oidc#security#supply-chain-security
Add a 'forbidden' rule: assert a claim is NOT one of a set of values about 9 hours ago
good first issue
Decode and validate GitHub Actions OIDC token claims against an expected-claims policy - a CI gate against trust-policy drift
Python
#aws#aws-iam#ci#cicd-security#github-actions#iam#jwt#least-privilege#oidc#security#supply-chain-security