minder

minder copied to clipboard

minder profile edit

2

### Please describe the enhancement I would like a `minder profile edit` command that would let me edit an existing profile ### Solution Proposal - grab the current profile -...

jhrozek

Allow one-shot fixes without full auto-remediation

1

### Please describe the enhancement As a user I'd like to tell minder to fix the issues it finds on my pipeline. However, I don't want to enable auto-remediation. ###...

JAORMX

Improvements around how we ingest/evaluate artifacts

2

This issue is a placeholder for a few items we discussed around improving the way we handle artifacts. **Details:** 1. We probably want smarter ways to filter container tags. e.g....

rdimitrov

### Please describe the enhancement Currently, we output the description and guidance as part of the security advisory that minder outputs. This is not enough to fully pin-point an issue....

JAORMX

Create a rule type for code scanning analyses to report and remediate scanning alerts

2

### Please describe the enhancement Minder can currently enable code scanning for a repo, and make sure that it's continually enabled. However, understanding whether code scanning is on in a...

meganbruce

Split ProfileService proto to ProfileService and RuleTypeService

3

The ProfileService has RPC methods for both profiles and rule types, so it's nicer if we split it. Example of the server-side methods: ```go type ProfileServiceServer interface { CreateProfile(context.Context, *CreateProfileRequest)...

rdimitrov

Not all commits being added to `main` are checked during PR

8

### Describe the issue It is currently possible to have commits prior to HEAD of an incoming branch merged into `main` that contain vulnerabilities `minder` seemingly does not evaluate all...

gregfurman

Include GitHub v4 GraphQL API

1

### Please describe the enhancement Currently, the GitHub REST API only supports up to `v3` which does not include some important automation functionality -- namely the `v3` cannot make a...

gregfurman

When the trusty evaluator can't fetch any scores, it still says that the PR contains no packages with low scores

3

### Describe the issue We have a branch in the trusty evaluator that checks if we managed to fetch a score for a package at all: ``` if resp.Summary.Score ==...

jhrozek

### Describe the issue The test `TestEventer/two_subscribers_to_topic` has a race condition: ``` ❌ TestEventer/two_subscribers_to_topic (10ms) eventer_test.go:192: published event on "a" eventer_test.go:192: published event on "b" eventer_test.go:199: Expected 3 events eventer_test.go:201:...

JAORMX