opencode-sandbox-plugin/socket.yml at main · isanchez31/opencode-sandbox-plugin · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
version: 2

issueRules:
  # Supply chain threats — critical for a security plugin
  malware: true
  didYouMean: true
  gptMalware: true
  installScripts: true
  obfuscatedFile: true
  manifestConfusion: true
  troll: true

  # Runtime behavior — high relevance for a sandboxing project
  networkAccess: true
  shellAccess: true
  envVars: true
  filesystemAccess: true
  usesEval: true

  # Dependency sourcing risks
  gitDependency: true
  httpDependency: true
  gitHubDependency: true

  # Ownership and maintenance
  unstableOwnership: true
  newAuthor: true
  deprecated: true
  unmaintained: true

  # Vulnerability tracking
  criticalCVE: true
  cve: true
  mediumCVE: true

  # Quality signals
  trivialPackage: true
  highEntropyStrings: true
  debugAccess: true
  telemetry: true

githubApp:
  enabled: true
  pullRequestAlertsEnabled: true
  dependencyOverviewEnabled: true
  projectReportsEnabled: true