Revision cfae14fe66a9b9ab4c15f7abe2af0eb4e7df010a authored by Robin Hahling on 09 April 2024, 12:49:43 UTC, committed by Robin Hahling on 09 April 2024, 19:19:16 UTC
Signed-off-by: Robin Hahling <robin.hahling@gw-computing.net>
1 parent 2f21e5b
.clomonitor.yml
# CLOMonitor metadata file
exemptions:
- check: slack_presence
reason: "The Cilium slack community can be found at http://slack.cilium.io/" # Justification of this exemption
- check: dangerous_workflow
reason: >
"It is safe to run code checkout '${{ github.event.pull_request.head.sha }}'
and 'github.event.pull_request.head.ref' in .github/workflows/build-images-base.yaml
as this workflow is only permitted to be executed after an explicit approval of a
subset of committers."
- check: signed_releases
reason: >
"All Cilium release images are cryptographically signed during build by cosign.
Images are hosted in Quay. OpenSSF Scorecard check is currently limited to repositories
hosted on GitHub, and does not support other source hosting repositories."
- check: token_permissions
reason: >
"Reason to use every non-read-only token in GitHub workflows is commented in the respective workflow files."
![swh spinner](/static/img/swh-spinner.gif)
Computing file changes ...