Skip to content

vulnerability-alerts

Explanation

You can do this by setting the vulnerability_alerts attribute to 'true'.

Possible Impact

Insecure vulnerabilities might be used in the codebase.

Suggested Resolution

Enable vulnerability alerts for all repositories.

Insecure Example

The following example will fail the github-repositories-vulnerability-alerts check.

resource "github_repository" "bad_example" {
  name                 = "example"
  description          = "My awesome codebase"
  vulnerability_alerts = false
}

Secure Example

The following example will pass the github-repositories-vulnerability-alerts check.

resource "github_repository" "good_example" {
  name                 = "example"
  description          = "My awesome codebase"
  vulnerability_alerts = true
}