Merge pull request #328 from govCMS/feature/DEVOPS-519-executable-files

[DEVOPS-519] Add check for executable files

shipshape.yml

@@ -4,9 +4,14 @@ checks:
       severity: high
       path: web
       disallowed-pattern: '^(adminer|phpmyadmin|bigdump)?\.php$'
+    - name: '[FILE] Executable files'
+      severity: normal
+      path: ./
+      disallowed-pattern: '.*\.(bin|deb|dmg|elf|exe|msi|sh)+$'
+      exclude-pattern: '^(vendor|web/core|web/modules/contrib)+.*'
     - name: '[FILE] Sensitive public files'
       path: web/sites/default/files
-      disallowed-pattern: '.*\.(sql|php|sh|py|bz2|gz|tar|tgz|zip)?$'
+      disallowed-pattern: '.*\.(sql|php|sh|py|bz2|gz|tar|tgz|zip)+$'
       exclude-pattern: '.*\.(css|js)\.gz?$'
       skip-dir:
         - private