github / github/platform-samples
the block confidential script is not blocking the kubeconfig file
未关闭
- 主要语言
- Shell
- 星标
- 2.2k
- 派生
- 1.9k
- 平均合并
- 7 天 19 小时
- 30 天内合并 PR
- 1
描述
Hello experts,
We are using the platform samples the block confidential pre-receive script in our environment. It was working as expected.
but when we scanned the GitHub data , we could identify that the kubeconfig files are not getting blocked.
Could you please suggest us to add the best regex to find the kubeconfig file and block it through pre-receive script..
贡献指南
调研方向
首先定位平台示例中用于阻止机密内容的 pre-receive 脚本,并阅读其中现有 secret 模式的匹配方式。使用 kubeconfig 文件重现扫描,然后为该输入添加覆盖测试,并确认 hook 会拒绝它,同时不会破坏现有的机密文件检查。
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- shell
- 领域
- devops, security
- Issue 类型
- 缺陷
- 难度
- 2/5
- 预计耗时
- 1-3 小时
- 活跃度
- 停滞
- 描述清晰度
- 基本清楚
- 新手友好度
- 35/100