Tag
Posts tagged “security”
Every post filed under “security”, newest first.
2 posts.
-
OpsCanopy 6 min read
The GitHub Actions security mistakes linters miss
YAML validators catch syntax, not exposure. Here are the five high-impact GitHub Actions misconfigurations — pull_request_target, script injection, unpinned actions, broad GITHUB_TOKEN scopes, and curl|bash — with the bad pattern and the fix for each.
- github-actions
- security
- ci-cd
-
OpsCanopy 5 min read
One CVE, four ignore files: unifying Trivy, Grype, Snyk and osv-scanner
A single triaged CVE suppression has to be re-encoded in .trivyignore, .grype.yaml, .snyk and osv-scanner.toml — each with a different shape. Here is the same suppression in all four formats, what maps cleanly, and what is lossy.
- security
- vulnerability-management
- devops