salesforce / salesforce/cloudsplaining

It would be nice to have an inclusion specifying version of scanning

Open
#268 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
JavaScript
Stars
2.2k
Forks
221
Avg merge
3h 21m
Merged PRs (30d)
8

Description

It would be nice to be able to run a scan against a known set of policies, either in a similar style to the exclusion processing, or through a means like AWS tags. This would be nice in environments where there are separations of responsibility, as when shifting sec ops left to development.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The request proposes selecting a known set of policies during a scan, using existing exclusion processing or AWS tags as possible entry points. Start by reading the exclusion-processing path and policy-selection flow, then define how the selected set is identified. Done means scans can target that set while preserving the separation-of-responsibility use case.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, javascript
Domain
authorization, cloud, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.