cloud-security

• terrascan version: 1.9.0
• terraform version: 1.0.1

Enhancement Request

Other security scanning tools (e.g. checkov and tfsec) have a --soft-fail flag or equivalent option that allows you to always exit with 0 status.

Extremely useful when running the tool without halting a pipeline for example.

I currently use a workaround, but something more concrete would be very desira

There's a lot of work that would need to be done to upgrade the report to use Vue 3, which is almost 2 years old at this point (Cloudsplaining uses Vue 2). I know there is some work required to upgrade the report to use Vue 3, but I don't have capacity for it right now.

I'd also like to get some upgrades to the Javascript dependencies since they are outdated but can't seem to upgrade them witho

Summary

Dependabot has identified several security vulnerabilities in the 3rd party libraries Pacbot relies on. In most cases, these vulnerabilities can be resolved by upgrading the library to the most current version.

Maintainers, if you're internal to T-Mobile, you should have been seeing these security alerts coming in over the last several weeks. *Please respond to these in a timely ma

Idea: automatically generate images showing the ATT&CK Tactics (not techniques) coverage

Columns: ATT&CK Tactics
Rows: Stratus Red Team attack techniques

runner集成了weakpass等插件，但是不支持weakpass的自定义字典等非通用化参数设置

From the Common Fate Community Slack:

We’re getting this error when trying to use aws ssm start-session - I couldn’t see anything online but now I’m reading Brian’s comment above is this something to do with the way granted is storing credentials? Is the SSM session manager plugin not compatible or something?

----------ERROR-------
Encountered error while initiating handshake. KM