You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
GitHub's Policy as Code project is designed to allow users and organizations to configure their Risk threshold for security issues reported by GitHub Advanced Security Platform.
15
-
The main goal is to help make sure that before publishing your application to productions, development, etc. you can validate if the application has any security issues that need to be addressed.
16
+
[GitHub's Policy as Code][github] project is designed to allow users and organizations to configure their Risk
17
+
threshold for security issues reported by GitHub Advanced Security Platform.
18
+
The main goal is to help make sure that before publishing your application to productions, development, etc.
19
+
you can validate if the application has any security issues that need to be addressed.
16
20
17
21
## ✨ Features
18
22
19
23
- Highly Configurable
20
24
- Re-usable across repositories
21
-
- Supports all GitHub Advanced Security Features
25
+
- Supports all [GitHub Advanced Security][advanced-security] Features
22
26
-[Code Scanning][github-codescanning]
23
27
-[Secret Scanning][github-secretscanning]
24
28
-[Supply chain / Dependabot][github-supplychain]
@@ -35,22 +39,25 @@ The main goal is to help make sure that before publishing your application to pr
35
39
36
40
Here is how you can quickly setup policy-as-code.
37
41
42
+
> [!TIP]
43
+
> Checkout the GitHub Actions [Policy as Code Examples][examples-actions]
44
+
38
45
```yaml
39
46
# Policy as Code
40
47
- name: Advance Security Policy as Code
41
48
uses: advanced-security/policy-as-code@v2.7.4
42
49
```
43
50
44
-
> [!TIP]
45
-
> Checkout the GitHub Actions [Policy as Code Examples][examples-actions]
46
-
47
51
> [!WARNING]
48
52
> The GitHub Action does not install Python on the runner. Please checkout at [the `actions/setup-python` Action][python-setup]
49
53
50
54
### CLI
51
55
52
56
The Policy as Code project is a self-contained Python based CLI tool.
53
57
58
+
> [!NOTE]
59
+
> All of the Dependencies for [Policy as Code are vendored][vendored] into this repository
60
+
54
61
**Bash / Zsh:**
55
62
56
63
```bash
@@ -68,9 +75,6 @@ cd policy-as-code
68
75
.\policy-as-code.ps1 --help
69
76
```
70
77
71
-
> [!NOTE]
72
-
> All of the Dependencies for [Policy as Code are vendored][vendored] into this repository
73
-
74
78
> [!TIP]
75
79
> Checkout the samples of [how to use / run the cli with examples][examples-cli].
76
80
@@ -296,17 +300,20 @@ Please refer to [MIT][license] for the full terms.
0 commit comments