@mesh-tech/mesh-cli 0.35.0 → 0.35.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/bin/mesh.js
CHANGED
|
@@ -12136,7 +12136,7 @@ function scanApp(root, appRel, resolution = probeResolution(root, appRel)) {
|
|
|
12136
12136
|
const files = [...new Set(surface.filter((h) => re.test(h.text)).map((h) => h.file))].sort().slice(0, 3);
|
|
12137
12137
|
for (const f of files) hit(code, rel(root, f), why);
|
|
12138
12138
|
};
|
|
12139
|
-
anti("IAC_GRANTS", RE_IAC_GRANT, "per-user role grant baked into IaC \u2014 grants belong in the Hub (Access \u2192
|
|
12139
|
+
anti("IAC_GRANTS", RE_IAC_GRANT, "per-user role grant baked into IaC \u2014 grants belong in the Hub (Access \u2192 Users), not in a config redeploy");
|
|
12140
12140
|
anti(
|
|
12141
12141
|
"POINTER_PROJECT_OVERRIDE",
|
|
12142
12142
|
RE_POINTER_OVERRIDE,
|
|
@@ -12340,7 +12340,7 @@ var init_app_check = __esm({
|
|
|
12340
12340
|
gate: "H",
|
|
12341
12341
|
title: "No role grants in IaC",
|
|
12342
12342
|
severity: "block",
|
|
12343
|
-
remediation: "remove the per-user grant map; grant roles from the Hub (App \u2192 Access \u2192
|
|
12343
|
+
remediation: "remove the per-user grant map; grant roles from the Hub (App \u2192 Access \u2192 Users)",
|
|
12344
12344
|
scope: "app"
|
|
12345
12345
|
},
|
|
12346
12346
|
POINTER_PROJECT_OVERRIDE: {
|