step-security/agent

Issues

• Filter can be bypassed on shared CDNs

  #426 opened 10 months ago by mschfh
  0

• Flush cache

  #202 opened a year ago by varunsh-coder
  6

• Update containerd to 1.6.12 or above

  #343 opened a year ago by varunsh-coder
  1

• Monitor DNS config files

  #291 opened 2 years ago by varunsh-coder
  0

• Add annotation if agent reverts

  #203 opened 2 years ago by varunsh-coder
  1

• [INT] Allow all IP addresses for allowed domain in firewall

  #272 opened 2 years ago by varunsh-coder
  1

• Reproducible build

  #234 opened 2 years ago by varunsh-coder
  4

• Improve file monitoring performance

  #238 opened 2 years ago by varunsh-coder
  0

• Generate provenance

  #138 opened 3 years ago by varunsh-coder
  0

• Allow UDP outbound traffic in block mode for allowed endpoints

  #220 opened 2 years ago by varunsh-coder
  0

• Local/ IPv6 address should not be sent to agent API

  #176 opened 3 years ago by varunsh-coder
  0

• Don't send insights , if send-insights is set to false in config.

  #189 opened 3 years ago by h0x0er
  0

• IPv6 addresses should not be sent in insights

  #179 opened 3 years ago by h0x0er
  0

• Domains that resolve to localhost do not show up in recommended policy

  #162 opened 3 years ago by varunsh-coder
  1

• Block ipv6 outbound traffic

  #170 opened 3 years ago by varunsh-coder
  3

• Automatically add GitHub Actions caching url to allowed list

  #157 opened 3 years ago by varunsh-coder
  1

• Update dependencies

  #160 opened 3 years ago by varunsh-coder
  1

• Investigate missing domain in recommendation

  #164 opened 3 years ago by varunsh-coder
  0

• Handle requests to Google DNS IP addresses

  #161 opened 3 years ago by varunsh-coder
  0

• Investigate call to IPv6 address in vip-go-mu-plugins

  #155 opened 3 years ago by varunsh-coder
  1

• Update license

  #156 opened 3 years ago by varunsh-coder
  1

• Address issues running on devspaces

  #140 opened 3 years ago by varunsh-coder
  1

• Investigate fastly call

  #145 opened 3 years ago by varunsh-coder
  0

• Generate SBOM for go projects

  #139 opened 3 years ago by varunsh-coder
  0

• Generate SBOM for node projects

  #137 opened 3 years ago by varunsh-coder
  0

• Show status of run across workflows in a status check

  #78 opened 3 years ago by varunsh-coder
  1

• Remove unlink from monitored syscalls for source change

  #134 opened 3 years ago by varunsh-coder
  2

• Test source change on canary workflows

  #132 opened 3 years ago by varunsh-coder
  1

• Detect source code modification

  #129 opened 3 years ago by varunsh-coder
  1

• Send most recent dns resolution for network connection

  #122 opened 3 years ago by varunsh-coder
  1

• Create issue in secure workflow for missing actions

  #121 opened 3 years ago by varunsh-coder
  1

• Add logging for failed api client requests

  #119 opened 3 years ago by varunsh-coder
  0

• Improve test cases

  #116 opened 3 years ago by varunsh-coder
  1

• Return DNS exfiltration detection in API

  #106 opened 3 years ago by varunsh-coder
  0

• Investigate git calls

  #105 opened 3 years ago by varunsh-coder
  0

• Setup canary account

  #104 opened 3 years ago by varunsh-coder
  1

• DNS resolution for blocked domains

  #99 opened 3 years ago by varunsh-coder
  0

• Add vstsmms.actions.githubusercontent.com to allowed domains

  #98 opened 3 years ago by varunsh-coder
  0

• Show blocked calls in annotations

  #77 opened 3 years ago by varunsh-coder
  1

• Improve dns exfil testing

  #92 opened 3 years ago by varunsh-coder
  1

• Block DNS exfiltration

  #85 opened 3 years ago by varunsh-coder
  1

• Use lock for process map in gettoolchain

  #86 opened 3 years ago by varunsh-coder
  1

• Use SHA256 to verify tools

  #81 opened 3 years ago by varunsh-coder
  1

• Verify git tools in workflow run

  #79 opened 3 years ago by varunsh-coder
  1

• Add support for egress-policy action input

  #74 opened 3 years ago by varunsh-coder
  1

• Log DNS resolutions and network calls

  #73 opened 3 years ago by varunsh-coder
  0

• Show known endpoints for action as verified

  #72 opened 3 years ago by varunsh-coder
  1

• Investigate monitor run failure

  #57 opened 3 years ago by varunsh-coder
  1

• Decide whether agent API URL should be explicitly listed

  #55 opened 3 years ago by varunsh-coder
  1

• Revert config changes on failure

  #56 opened 3 years ago by varunsh-coder
  0