diff --git a/.security_config/security_config.yaml b/.security_config/security_config.yaml new file mode 100644 index 0000000..7b3f026 --- /dev/null +++ b/.security_config/security_config.yaml @@ -0,0 +1,18 @@ +# yaml-language-server: $schema=https://security-api.appsec.inday.io/schemas/security_config.json +# This is the configuration file for Chimera. This file is required to allow the scanning platform to scan your repo. +# Please see https://wolinks.com/chimera for details. + +##################### +# SLACK CONFIGURATION +##################### +# Uncomment the below section and provide a Slack channel's name to allow Chimera to +# notify your slack channel about scans. Please see Chimera documentation on how to do this. +slack: + enabled: true + channel: pd-workflows + +########################## +# SCAN TOOL CONFIGURATION +########################## +tools_config: + snyk: {} diff --git a/.security_config/security_contact.yaml b/.security_config/security_contact.yaml new file mode 100644 index 0000000..7a45453 --- /dev/null +++ b/.security_config/security_contact.yaml @@ -0,0 +1,12 @@ +# This file contains contact info for the team that maintains +# this repo. This information will be used by security in the +# event that we need to contact you about security issues +# discovered in this code. +# +# See https://wolinks.com/repocontact for more information. +# +# You may use the Red Hat YAML extension in VS Code to validate this file. +# yaml-language-server: $schema=https://security-api.appsec.inday.io/schemas/security_contact.json + +version: "1.0" +include: "git::https://github.com/PipedreamHQ/pipedreamin"