TLS Config Lint
Version updated for https://github.com/sebrandon1/tls-config-lint to version v1.1.2.
- This action is used across all versions by ? repositories.
Action Type
This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary
The tls-config-lint GitHub Action scans source code written in Go, Python, Node.js/TypeScript, C++, Java, and Rust for TLS configuration anti-patterns and security issues. It automates the detection of 74 common vulnerabilities, provides inline annotations in pull requests, and generates detailed reports, including optional SARIF output for integration with GitHub Code Scanning. This action helps developers “shift left” by identifying and addressing TLS security flaws early in the development process.
Release notes
What’s Changed
- Add integration tests for full entrypoint pipeline by @sebrandon1 in https://github.com/sebrandon1/tls-config-lint/pull/11
- Add distinct exit codes and early jq validation by @sebrandon1 in https://github.com/sebrandon1/tls-config-lint/pull/12
- Add Rust language support by @sebrandon1 in https://github.com/sebrandon1/tls-config-lint/pull/13
- Add framework-aware TLS anti-patterns for Python, Node.js, and Java by @sebrandon1 in https://github.com/sebrandon1/tls-config-lint/pull/14
Full Changelog: https://github.com/sebrandon1/tls-config-lint/compare/v1.1.1...v1.1.2