mirror of
https://github.com/anchore/syft.git
synced 2025-11-17 08:23:15 +01:00
12 lines
380 B
YAML
12 lines
380 B
YAML
rules:
|
|
unpinned-uses:
|
|
ignore:
|
|
# Allow unpinned uses of trusted internal anchore/workflows actions
|
|
- update-anchore-dependencies.yml
|
|
|
|
dangerous-triggers:
|
|
ignore:
|
|
# Safe use of pull_request_target - only runs trusted scripts from base repo,
|
|
# never checks out PR code, needs secrets for labeling PRs from forks
|
|
- detect-schema-changes.yaml
|