minder
minder copied to clipboard
stacklok
Software Supply Chain Security Platform
This would allow for inspection of organization properties and directly support OSPS-AC-01.
### Please describe the enhancement To create a data source, rule type or profile, we pass a filename as a argument, eg `minder ruletype create --file path/to/fiile.yaml` If the file...
Currently it's not obvious that the `project_id` referenced in the `rule_type_data_sources` table is the ID of the project that the rule type belongs to, since data sources and rule types...
When a new PR comment is added, we should combine it with existing comments from other rules, rather than having Minder create separate comments for each rule. Out of scope:...
When running `minder ruletype delete --all`, it's possible the ruletypes cannot be deleted because they are referenced by existing profiles. In that case, we see: ``` The following rule type(s)...
### Describe the issue When Minder is using a bundle and I run `minder ruletype delete --all`, I see the following: ``` The following rule type(s) are referenced by existing...
Open Policy Agent has released a v1.0.0. This includes making a number of features which were previously available under the `import rego.v1` or other feature flags. (Yay!) The `rego.v1` flag...
### Describe the issue I'm writing a rule similar to https://github.com/mindersec/minder-rules-and-profiles/pull/228/files#diff-c403aa914bf9da4592bdc7034803e737cabb0713223d0c07ddb4a8ba99004936 When i run mindev ruletype lint -r [my.yaml] on a file I get the following errors: ``` aggregates: {}...
### Please describe the enhancement I'd like to be able to insert a YAML section depending on a certain context. e.g. I want to allow for adding scanning steps AFTER...
### Describe the issue Invoking `minder datasource apply` on a file without a project id set in the context fails: ``` Message: error applying data source from datasource.yaml Details: error...
