Skip to content

SecurityPolicy: Add leading and trailing checks for env variables - #2431

Merged
Kirtana Ashok (kiashok) merged 1 commit into
microsoft:mainfrom
MahatiC:security-policy-fix
Jun 5, 2025
Merged

SecurityPolicy: Add leading and trailing checks for env variables#2431
Kirtana Ashok (kiashok) merged 1 commit into
microsoft:mainfrom
MahatiC:security-policy-fix

Conversation

@MahatiC

@MahatiC Mahati Chamarthy (MahatiC) commented May 23, 2025 •
edited
Loading

Copy link
Copy Markdown
Member
  • This change adds leading and trailing character checks for regex environment variables
  • Framework.rego is modified to include this check and corresponding tests are modified to validate this.

@MahatiC
Mahati Chamarthy (MahatiC) requested a review from a team as a code owner May 23, 2025 15:21
@MahatiC
SecurityPolicy: Add leading and trailing checks
e46b38d 
For environment variables in the rego framework.

Signed-off-by: Mahati Chamarthy <mahati.chamarthy@gmail.com>
@micromaomao

Tingmao Wang (micromaomao) commented May 27, 2025

Copy link
Copy Markdown
Member

I've briefly validated this fix applied against release/conf-aci/0.2

@kiashok
Kirtana Ashok (kiashok) merged commit 9b2e94f into microsoft:main Jun 5, 2025
@MahatiC
Mahati Chamarthy (MahatiC) deleted the security-policy-fix branch June 6, 2025 08:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@anmaxvl Maksim An (anmaxvl) anmaxvl approved these changes
+1 more reviewer
@kiashok Kirtana Ashok (kiashok) kiashok approved these changes
Reviewers whose approvals may not affect merge requirements

Assignees

@kiashok Kirtana Ashok (kiashok)

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@MahatiC @micromaomao @anmaxvl @kiashok