Skip to content
Scan Rules DB and Namespaces

Replace path traversal hack with $REGISTRY_PATH and $REGISTRY_MODULE_PATH env vars #998

Sign in to view logs

Replace path traversal hack with $REGISTRY_PATH and $REGISTRY_MODULE_PATH env vars

Replace path traversal hack with $REGISTRY_PATH and $REGISTRY_MODULE_PATH env vars #998

Workflow file for this run

.github/workflows/registry-scanner.yaml at 0ec98be
name: Scan Rules DB and Namespaces
on:
push:
branches:
- main
pull_request:
branches:
- main
types:
- opened
- reopened
- synchronize
permissions:
contents: read
jobs:
scan_job:
name: Scanner Registry Action
runs-on: "ubuntu-latest"
steps:
- name: Harden Runner
uses: step-security/harden-runner@128a63446a954579617e875aaab7d2978154e969 # v2.4.0
with:
egress-policy: audit
- name: Checkout
uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
- name: Scan Registry
uses: boostsecurityio/scanner-registry-action@13a956983c6f1f1dd4dc9051df62c54097299c4d # v1.5.7
with:
api_endpoint: ${{ vars.BOOST_API_ENDPOINT }}
api_token: ${{ secrets.BOOST_SYSTEM_API_KEY_REGISTRY }}