adam/sh-openswe-traces
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/sh-openswe-traces.git synced 2026-10-03 02:13:31 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
sh-openswe-traces/.security-review
History
Adam Moussa dbd41bb52c
Some checks failed
Deploy / deploy (push) Has been cancelled
Details
chore(security): add repo-local suppressions for adjudicated IAM FPs (#3) 
Moves proof-or-kill-verified checkov false positives on bootstrap.yaml ExecRole
(CFN-only role, ARN-scoped IAM-user actions gated by an explicit anti-escalation
Deny; KMS CreateKey Resource:* inherent to key creation) from machine-level to a
tracked repo-local .security-review/suppressions.json so the Open SWE
daily-report automation resolves them. Machine-level copy retained until merge.
2026-07-13 14:30:58 -04:00
..
suppressions.json chore(security): add repo-local suppressions for adjudicated IAM FPs (#3) 2026-07-13 14:30:58 -04:00