Daniel George Holz

Allow a role to be assumed before checking Docker images in AWS ECR

2

This is to resolve #6152 Very much a work-in-progress. I've tested this code with: * An ECR repository that gives read permissions to the user via a resource policy *...

Add toggle to control if Brakeman scans changed files, or all files

6

Thanks for writing Pronto! We've integrated it into our CI pipeline, but have noticed that some checks fail to pick up some Brakeman issues, since Brakeman is passed a list...

Trying to capture exit code when `set -e` is active

1

I see in the new composite action, we try to capture the exit code from running & reporting the Brakeman findings: ``` brakeman [...] | reviewdog [...] exit_code=$? echo '::endgroup::'...

Subtracting two `Time`s returns a `Float`, which may not be accurate down to subsecond resolution. Because `Float`s are stored as double- precision values (IEEE 754), they can have resolutions much...

Time.now sometimes has greater-than-nanosecond precision when called under Timecop.travel

3

Hello, I have a test that looks like: ``` Timecop.travel(some_date) company = create_company […] Timecop.freeze EmailPolicy::Actions::Block(company) expect(Preferences::EmailRateLimit.for(company).blocked_until).to eq(6.hours.from_now) ``` Where `EmailPolicy::Actions::Block` calls `Time.now`, and serialised the date to interact with...