legitify
legitify copied to clipboard
Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets
### TL;DR Third-party applications may expose risk when not restricted. For instance:  This will allow you to prevent untrusted apps from accessing the organization's resources while allowing organization members...
### TL;DR Prepare a GitHub action for easy integration of legitify as a periodic scanner to keep organizations/repositories secure. ### Detailed design ```markdown This could be implemented as: 1. Workflow...
### TL;DR Add SARIF as an additional output format ### Detailed design _No response_ ### Additional information _No response_
### TL;DR Support scanning GHES for misconfigurations ### Detailed design _No response_ ### Additional information _No response_
### TL;DR Add a policy that alerts if the GitHub Actions default permission is not read-only. Applies for repository & organization ### Detailed design _No response_ ### Additional information _No...
### TL;DR I would like to be able to set a flag to skip analyzing archived repos in my GitHub organization so I don't have to comb through results of...
#### What's being changed? Updating docs and action examples to note that one must separate multiple repos with commas. #### Is this PR related to an existing issue? no ####...
### TL;DR Using the github action- when I want to just scope the analysis to certain namespaces and I pass the namespace flag to extras- I get errors. ### Expected...
### TL;DR Currently, it is not possible to use the action with the automatically generated GITHUB_TOKEN because it has no permission to execute the following API: ``` https://api.github.com/user/orgs ``` It...
### TL;DR As the remediation steps suggest, many policies can be fixed automatically. Introduce a new command to apply these fixes. ### Detailed design ```markdown - Support for receiving the...