You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "potiuk (via GitHub)" <gi...@apache.org> on 2024/11/26 10:34:20 UTC
[I] Add alerts on slack for new "Security" issues [airflow]
potiuk opened a new issue, #44382:
URL: https://github.com/apache/airflow/issues/44382
There is a "security" tab in the airflow repository where code scanning produces new issues discovered in our code.
In order to drag attention to it, we should have an automation to post slack messages in a private "security" channel - this, similarly as in case of main failures - might help us with more "group" handling of noticing and handling such security reports.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Add alerts on slack for new "Security" issues [airflow]
Posted by "potiuk (via GitHub)" <gi...@apache.org>.
potiuk commented on issue #44382:
URL: https://github.com/apache/airflow/issues/44382#issuecomment-2502382030
> Maybe we can find a way for the scanner to run on the PR directly before we merge it?
Yes. good point https://github.com/apache/airflow/blob/main/.github/workflows/codeql-analysis.yml likely need to be updated to work on `pull request` as well. I am not sure if it is going to work on pull requests from forks - but there does not seem to be a limitation for it mention and it needs only 'read-content" permission: https://docs.github.com/en/code-security/code-scanning/managing-code-scanning-alerts/triaging-code-scanning-alerts-in-pull-requests
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Add alerts on slack for new "Security" issues [airflow]
Posted by "eladkal (via GitHub)" <gi...@apache.org>.
eladkal commented on issue #44382:
URL: https://github.com/apache/airflow/issues/44382#issuecomment-2500351347
Maybe we can find a way for the scanner to run on the PR directly before we merge it?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Add alerts on slack for new "Security" issues [airflow]
Posted by "potiuk (via GitHub)" <gi...@apache.org>.
potiuk commented on issue #44382:
URL: https://github.com/apache/airflow/issues/44382#issuecomment-2500253428
cc: @amoghrajesh - when you have time :)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Add alerts on slack for new "Security" issues [airflow]
Posted by "potiuk (via GitHub)" <gi...@apache.org>.
potiuk commented on issue #44382:
URL: https://github.com/apache/airflow/issues/44382#issuecomment-2502389382
https://github.com/apache/airflow/pull/44404 -> seems to work out of the box.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org