-
-
Notifications
You must be signed in to change notification settings - Fork 1
Open
Description
In 2025 we discussed in Ghent (CfgMgmtCamp) that we want to make usage of exec more secury.
There have been 2 possible solutions:
- a lint plugin which identifies if an exec has the idempotency parameters set (out of scope for this project)
- let the type check if all desired parameters are set
The lint plugin is finished: https://github.com/voxpupuli/puppet-lint-exec_idempotency-check
I have now worked on a PoC (pile of crap) to check if extending the tape is possible. See OpenVoxProject/openvox#237
We should check if both are desired or if the linter is suffucient.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels
Type
Projects
Status
No status
Status
No status