adam/meal-order-manager
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/meal-order-manager.git synced 2026-09-30 05:23:13 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
meal-order-manager/.security-review
History
Adam Moussa f7957436bd
Some checks failed
Deploy API / Deploy API to dev (push) Has been cancelled
Details
Deploy API / Deploy API to prod (push) Has been cancelled
Details
fix(iam): drop githubdeploy workflow_ref OIDC condition (PLAT-222) (#215) 
* fix(iam): drop githubdeploy workflow_ref OIDC condition

AWS STS does not evaluate GitHub workflow_ref, so that trust condition fail-closes AssumeRoleWithWebIdentity.

* chore(security): retarget githubdeploy Checkov suppression

Dropping the workflow_ref trust condition shifted CKV_AWS_111 from line 49 to 42. Permissions are unchanged.

* style: apply formatter

---------

Co-authored-by: sea-haven-auto-fix[bot] <5037331+sea-haven-auto-fix[bot]@users.noreply.github.com>
2026-09-22 21:30:25 +00:00
..
suppressions.json fix(iam): drop githubdeploy workflow_ref OIDC condition (PLAT-222) (#215) 2026-09-22 21:30:25 +00:00