0
Fork 0
mirror of https://github.com/logto-io/logto.git synced 2024-12-16 20:26:19 -05:00
logto/.zap/rules.conf
simeng-li 64e78024e0
ci(core): disable cloud metadata rule in zap (#4277)
* ci(core): disable cloud metadata rule in zap

disable cloud metadata rule in zap

* fix: update rule files

update rule files

* fix: update the conf file

update the conf file

* fix: revert docker settings

revert docker settings
2023-08-03 10:17:14 +08:00

9 lines
344 B
Text

# Mark the following rules as INFO
# CloudFlare will block the metadata endpoint access
90034 INFO (Cloud Metadata Potentially Exposed - Active/release)
10096 INFO (Timestamp Disclosure - Passive/release)
10063-1 INFO (Permissions Policy Header Not Set - Passive/beta)
10055-4 INFO (CSP - Wildcard Directive)
40039 INFO (Web Cache Deception)