Google GitGoogle Git
Sign in
apache/infrastructure-gha-workflow-scanner/8b91bb81250f2c732d01ba3d3db5e46732461716
commit
8b91bb81250f2c732d01ba3d3db5e46732461716
[log]
author
dfoulks1 <48735727+dfoulks1@users.noreply.github.com>
Thu Oct 24 09:39:56 2024 -0400
committer
GitHub <noreply@github.com>
Thu Oct 24 09:39:56 2024 -0400
tree
ab15ba4a20544e7e445722ac7a289d606c49bd2e
parent
0a11e286bb83e6057eaa2c703195a5bfee9cef75 [diff]
parent
498c25a72606da3445931e5b0640ca4519210251 [diff]
Merge pull request #5 from apache/dependabot/pip/urllib3-2.2.2

Bump urllib3 from 2.2.1 to 2.2.2
tree: ab15ba4a20544e7e445722ac7a289d606c49bd2e
  1. gha_scanner/
  2. tests/
  3. .gitignore
  4. gha_scanner.config
  5. Pipfile
  6. Pipfile.lock
  7. pipservice-gha-workflow-scanner.service
  8. README.md
  9. scanner.py
README.md

ASF GitHub Actions Workflow Scanner

Setting up

pipenv install

Create a Read-Only GitHub token

Enter your GitHub token into the gha_scanner.config file. Optionally, copy the gha_scanner.config file somewhere else and pass it to scanner.py with -c/--config.

Starting

pipenv run python3 ./scanner.py

Logging

The policy scanner logs to logs/gha_scanner.log by default.