mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-24 06:34:33 +08:00
Alexander Watson
d7f1f8052d
Integrate Z3-based formal verification for sandbox policies as openshell.prover. Detects data exfiltration paths, write bypass attacks, L7 enforcement gaps, overpermissive methods, and privilege escalation via binary capability chains. Closes #699 Signed-off-by: Alexander Watson <zredlined@gmail.com>
10 lines
171 B
YAML
10 lines
171 B
YAML
credentials:
|
|
- name: github-pat
|
|
type: github-pat
|
|
scopes:
|
|
- repo
|
|
injected_via: GITHUB_TOKEN
|
|
target_hosts:
|
|
- api.github.com
|
|
- github.com
|