Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ASK-1387 Tuning AWS.IAM.Role.GitHubActionsTrust policy to be more flexible #1509

Open
wants to merge 2 commits into
base: develop
Choose a base branch
from
Open

ASK-1387 Tuning AWS.IAM.Role.GitHubActionsTrust policy to be more flexible #1509

wants to merge 2 commits into from

Conversation

akozlovets098
Copy link
Contributor

Background

AWS.IAM.Role.GitHubActionsTrust policy had token.actions.githubusercontent.com:sub hardcoded to need exactly one possible beginning of value containing * (repo:org/repo:*), which could cause the policy to fail even when org and repo were trusted but named differently.

Changes

  • Added the possibility to add trusted org/repo pairs

Testing

  • pat test

@akozlovets098 akozlovets098 requested a review from a team as a code owner February 7, 2025 13:43
@arielkr256 arielkr256 added policies Real-time misconfiguration detections tuning detection tuning labels Feb 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
policies Real-time misconfiguration detections tuning detection tuning
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@akozlovets098 @arielkr256