aws / aws-lambda-runtime-interface-emulator

Apache License 2.0
915 stars 95 forks source link

Add automatic vulnerabilities check for released binaries #123

Closed valerena closed 2 months ago

valerena commented 3 months ago

Issue #, if available:

Description of changes: Run a vulnerability check over the released binaries. If there are vulnerabilities in the latest released binaries, then create an issue to call this out. Before creating the ticket, check if the vulnerabilities still exist when rebuilding the binaries with the same code, and include that info in the new issue.

Example issue: https://github.com/valerena/aws-lambda-runtime-interface-emulator/issues/4

There's an improvement to be made to only create the issue if no issue has been created already. That's coming as a future improvement.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.