ci: security guardian changes#36110

Merged

mergify[bot] merged 55 commits intomainfrom

security_guardian_changes

Dec 5, 2025

Commits on Sep 18, 2025

feat: Changed intrinsic scanner in security guardian to exempt kms key default policy from scans
kumvprat
committed
feat: Modified rules for catching more broad policies + changed intrinsic scanner code to exempt some services from root principal check
kumvprat
committed

Commits on Oct 28, 2025

feat: Adding security guardian new rules and disabling intrinsic scanner by default till it runs consistenly and changing workflow to run on pull_request_target
kumvprat
committed
Merge branch 'main' into security_guardian_changes
kumvprat
committed

Commits on Oct 29, 2025

feat: Removed ecr image checks + reverted back for cfn guard to show summary and output as provided in the tool invocation arguments + Removed s3 bucket versioning requirement + data trace checks o…
kumvprat
committed

Commits on Oct 30, 2025

Commits on Nov 3, 2025

feat(security-guardian): enhance CFN intrinsic resolution and add comprehensive tests + Fix Fn::Sub literal escaping and parameter resolution + Add shorthand form support (etc.) + Improve Fn::Selec…
kumvprat
committed

Commits on Nov 7, 2025

Commits on Nov 10, 2025

Commits on Nov 11, 2025

Commits on Nov 19, 2025

Commits on Dec 4, 2025

Commits on Dec 5, 2025

Merge branch 'main' into security_guardian_changes
mergify[bot]
authored