RB

Improve security by adding openssf scorecard which gives an objective score to track https://securityscorecards.dev/viewer/?uri=github.com/reviewdog/action-setup https://scorecard.dev/ https://app.stepsecurity.io/securerepo?repo=https://github.com/reviewdog/action-setup

Improve security by adding openssf scorecard which gives an objective score to track https://securityscorecards.dev/viewer/?uri=github.com/reviewdog/action-tfsec https://scorecard.dev/ https://app.stepsecurity.io/securerepo?repo=https://github.com/reviewdog/action-tfsec

Amplify App sets up deprecated oauth instead of the github app webhook

13

### Community Note * Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request * Please do...

feat: include aws-cli useragent

1

## what - feat: include aws-cli useragent ## why - The awscli can be used to evade the clickops notifier. Let's flag these actions too. ## references - Related but...

I believe it's due the `userIdentity.type` which is unknown ```json { "eventVersion": "1.09", "userIdentity": { "type": "Unknown", "principal": "" }, "userAgent": "Coral/Netty4", "_": "..." } ``` This particular event comes...

## what - chore: exclude iot:RegisterCertificate and some aws q ## why - The iot:RegisterCertificate seems to happen automatically and I do not understand why it gets picked up by...

It would be nice to see how the org mode differs from the standalone High level explanation helps too 1. Cloudtrail pushes to s3 1. S3 has an object notification...

Improve installation

2

It would be nice to install using `go install` or `brew install` or similar Note the above is just a suggestion on how to improve installation. Any improvements to make...

## what - docs: archived ## why - Show this repo is archived in favor of another repo ## references - https://github.com/cloudposse/terraform-aws-route53

Is there a way to set a ttl on resources to delete them after X days ?

2

We used to use this https://github.com/mlevit/aws-auto-cleanup to set a ttl to delete resources after 30 days for our sandbox account but would rather use aws-nuke instead if it's possible. Can...