RB

Using this page as an example https://securityscorecards.dev/viewer/?uri=github.com/slackapi/slack-github-action Here is a screenshot in firefox  Here is a screenshot in firefox without `font-family` key (disabling defaults to `inherit`) 

Arbitrary code when using eq and when using test in if statements

2

Ref https://yossarian.net/til/post/some-surprising-code-execution-sources-in-bash/#fnref-source Is there a way for shellcheck to catch these weaknesses and offer better alternatives?

> Should this be revisited now that Terraform has yet another way to define the rule resources..... > `aws_vpc_security_group_ingress_rule` > `aws_vpc_security_group_egress_rule` _Originally posted by @bmj8409 in https://github.com/GoogleCloudPlatform/terraformer/issues/493#issuecomment-1804657791_ --- There are...

Cloudformation stacks in terraform containing list items can show up as line removals due to the diff replacement regex

1

### Community Note * Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request. Searching for pre-existing...

renovate is no longer working after recent config migration

1

### Community Note * Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request. Searching for pre-existing...

## what - ci: release branches for security updates only ## why - Fewer PRs that are duplicated across release branches ## tests ## references - https://docs.renovatebot.com/configuration-options/#matchbasebranches

Migrate off of archived gopkg.in/yaml.v3

1

### Community Note * Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request. Searching for pre-existing...

Stuck failed check if a non-existent directory or project is given

3

### Community Note * Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request. Searching for pre-existing...

aws.iam-role - check-permissions filter method of SimulatePolicy is too slow

2

### Describe the feature I am always frustrated when it takes too long to test all the roles in my org using check-permissions which depends on simulating policies for every...

aws.iam-role - filter based on trust policy

8

**Is your feature request related to a problem? Please describe.** I'm currently using a c7n policy that will auto attach an IAM managed policy to every newly created role. I'd...