nickrusso42518 / nots

[Ansible] Nick's OSPF TroubleShooter
BSD 3-Clause "New" or "Revised" License
176 stars 46 forks source link

Consider a YAML security scanner #3

Closed nickrusso42518 closed 5 years ago

nickrusso42518 commented 6 years ago

This project (at least today) has no need for several Ansible modules or directives. These have security flaws and are best avoided. Given that all devices use connection: local, these would be executed from the perspective of the control machine and could have serious impacts on the automation system.

nickrusso42518 commented 6 years ago

Need to evaluate whether command and script really matter, since the simple linting solution currently deployed catches false positives like ios_command: and before_script: which are not risky.

nickrusso42518 commented 5 years ago

no activity and not that important; closing