configsentry 0.0.20 → 0.0.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +8 -3
  2. package/package.json +1 -1
package/README.md CHANGED
@@ -15,7 +15,7 @@ npx configsentry ./docker-compose.yml
15
15
  ### GitHub Action (minimal)
16
16
 
17
17
  ```yml
18
- - uses: alfredMorgenstern/configsentry@v0.0.18
18
+ - uses: alfredMorgenstern/configsentry@v0.0.20
19
19
  with:
20
20
  target: .
21
21
  ```
@@ -27,7 +27,7 @@ permissions:
27
27
  contents: read
28
28
  security-events: write
29
29
 
30
- - uses: alfredMorgenstern/configsentry@v0.0.18
30
+ - uses: alfredMorgenstern/configsentry@v0.0.20
31
31
  with:
32
32
  target: .
33
33
  sarif: true
@@ -100,6 +100,11 @@ node dist/cli.js --target ./docker-compose.yml --baseline .configsentry-baseline
100
100
  - Troubleshooting / FAQ: [`docs/troubleshooting.md`](docs/troubleshooting.md)
101
101
  - Launch pack (links + demo assets): [`docs/launch-pack.md`](docs/launch-pack.md)
102
102
 
103
+ ### Footguns (short explainers)
104
+ - Docker socket mount: [`docs/footguns/docker-socket.md`](docs/footguns/docker-socket.md)
105
+ - Exposed DB ports: [`docs/footguns/exposed-db-ports.md`](docs/footguns/exposed-db-ports.md)
106
+ - Risky host mounts: [`docs/footguns/host-mounts.md`](docs/footguns/host-mounts.md)
107
+
103
108
  ## Use in GitHub Actions (copy/paste)
104
109
 
105
110
  More examples: [`docs/action-usage.md`](docs/action-usage.md)
@@ -139,7 +144,7 @@ jobs:
139
144
  runs-on: ubuntu-latest
140
145
  steps:
141
146
  - uses: actions/checkout@v4
142
- - uses: alfredMorgenstern/configsentry@v0.0.18
147
+ - uses: alfredMorgenstern/configsentry@v0.0.20
143
148
  with:
144
149
  target: .
145
150
  # optional: baseline: .configsentry-baseline.json
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "configsentry",
3
- "version": "0.0.20",
3
+ "version": "0.0.21",
4
4
  "description": "Developer-first guardrails for docker-compose.yml (security + ops footguns).",
5
5
  "type": "module",
6
6
  "license": "MIT",