awslabs/automated-security-helper

Issues

• container image for ASH runs as root inside the container

  #78 opened 17 days ago by climbertjh2
  4

• (codepipeline): Unable to find ASH docker image

  #110 opened 2 months ago by pradoz
  0

• Bug: docker: invalid reference format: repository name must be lowercase.

  #107 opened 3 months ago by Fennerr
  0

• Add an ignore option for npm audit findings

  #70 opened 8 months ago by joebehrens
  1

• Feature request: Allow specifying severity level of a scan

  #40 opened a year ago by xgfd
  1

• Low sevs return an error with ASH scan too

  #103 opened 5 months ago by khastation
  0

• Include (or not) CDK Nag Report as part of the ASH aggregated report

  #102 opened 5 months ago by rafaelpereyra
  1

• Bug in case of that pnpm project is in nested form

  #99 opened 6 months ago by Kang3498
  1

• Unable to parse .bandit file

  #101 opened 6 months ago by Richins-AWS
  0

• CloudFormation templates are not scanned unless AWSTemplateFormatVersion key is included in the template

  #100 opened 6 months ago by scrt-dev
  0

• Finch on Ash

  #67 opened 8 months ago by Shubhranshu153
  4

• feat(results): add flag to output machine-readable formats from underlying tools where possible

  #50 opened 6 months ago by scrthq
  0

• feat(offline): Create CDK-based test infrastructure with Inspection VPC for air-gapped testing

  #96 opened 6 months ago by scrthq
  0

• feat(offline): Identify ASH breaking points when scanning without network connectivity

  #95 opened 6 months ago by scrthq
  0

• feat(output): Minimal output format (ASHARP-lite)

  #94 opened 6 months ago by scrthq
  0

• Offline Mode for ASH

  #41 opened a year ago by ForeverYoung48
  0

• [Feature Request] Clear and Simple Output Results

  #92 opened 7 months ago by bestickley
  0

• Normalize output messaging of ASH for the new single-container architecture

  #88 opened 7 months ago by orsifacundo
  0

• Feature request: Update documentation with single-container architecture details and CI examples

  #38 opened 7 months ago by scrthq
  1

• Feature request: Enable selection of specific scans to execute

  #39 opened a year ago by xgfd
  0

• [Feature Request] Display findings in CLI

  #85 opened 7 months ago by Kieharper
  0

• ASH scans git_report_result.txt

  #55 opened 8 months ago by bestickley
  3

• debug_echo output from identifyipynb.sh is going to aggregated_results.txt

  #83 opened 8 months ago by climbertjh2
  0

• feat(js): Add additional JS related extensions like .jsx, .ts, .tsx to extension filter for JS scan inclusion

  #46 opened 8 months ago by scrthq
  0

• python:latest image is now python3.12 and is breaking Dockerfile-yaml

  #25 opened a year ago by jasonend
  1

• Scanner option to cancel the run, when there are many files in `--source-dir` not working

  #53 opened 8 months ago by climbertjh2
  2

• ASH takes 2x the time with node_modules installed

  #77 opened 8 months ago by bestickley
  0

• Feature Request: `brew install ash`

  #45 opened 10 months ago by bestickley
  2

• Support pnpm audit

  #56 opened 8 months ago by bestickley
  4

• Feature request: Include AWS CLI in the ASH image

  #76 opened 8 months ago by climbertjh2
  2

• Inconsistent behavior when running ash inside the ash container vs. running ash outside of the ash container

  #75 opened 8 months ago by climbertjh2
  2

• v1.3.0 of `ash` puts all CDK-NAG scan output into the folder corresponding to the last file scanned

  #68 opened 8 months ago by climbertjh2
  3

• v1.3.0 - grype and syft scanners are not running against items in git repositories

  #72 opened 8 months ago by climbertjh2
  3

• `--source-dir` folder name with whitespace causes failure to run `ash` tool

  #58 opened 8 months ago by climbertjh2
  2

• feat(config): identify potential configuration solutions for ASH

  #65 opened 9 months ago by scrthq
  0

• feat(results): adapt standardized JSON output to SARIF

  #62 opened 9 months ago by scrthq
  0

• feat(results): adapt standardized JSON output to CSV

  #63 opened 9 months ago by scrthq
  0

• feat(results): adapt standardized JSON output to JUnitXML

  #61 opened 9 months ago by scrthq
  0

• feat(results): adapt standardized JSON output to AWS Security Finding Format (ASFF)

  #60 opened 9 months ago by scrthq
  0

• feat(results): add JSON output, integrate structured data parser for tool result output content to standardize the aggregated results

  #59 opened 9 months ago by scrthq
  0

• .gitallowed not respected in ASH

  #57 opened 9 months ago by bestickley
  3

• .git/config [secrets] removed in ash

  #48 opened 9 months ago by bestickley
  2

• CDK Nag Scan job is failing for some CloudFormation templates

  #52 opened 9 months ago by climbertjh2
  0

• Mitigate potential risks of rm command

  #36 opened 9 months ago by john-aws
  0

• feat: Multi-arch platform support

  #42 opened 10 months ago by scrthq
  0

• fix(ash): Use .gitignore during archive expansion to ignore archives not included in the git index

  #44 opened 10 months ago by scrthq
  0

• Feature request: automate CHANGELOG generation

  #37 opened a year ago by scrthq
  1

• Getting npm output even with -q option

  #32 opened a year ago by orsifacundo
  3

• Issue with Dockerfile-cdk, and returning with '1' with latest version -> Dockerfile-cdk : 1

  #33 opened a year ago by upi360
  2

• scanning cdk project generates error

  #24 opened a year ago by tuladp
  1