StackGuardian / StackGuardian/tirith
Tirith policy for detecting changes in JSON files
Open
Nobody has claimed this yet.
need-discussion
- Dominant language
- Python
- Stars
- 165
- Forks
- 42
- Avg merge
- 1d 3h
- Merged PRs (30d)
- 11
Description
Imagine a Tirith policy that will not allow changes in a JSON key, e.g. ContextTag. Currently, we are only able to check one file. Of course, we can also preprocess the JSON files first, so maybe we can have changes key that contains all of the paths that are changed. Anyway, any idea are welcome
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No file, test, or entry point is named in the issue. Start by tracing how Tirith evaluates policies against one file and how JSON preprocessing is handled; define what changed paths should contain and verify that a policy can detect a modified ContextTag key across JSON files.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- devops, security, tooling
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100