Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow disabling PowerShell features that can be run from a repository #1742

Closed
BernieWhite opened this issue Jan 26, 2024 · 0 comments · Fixed by #1743
Closed

Allow disabling PowerShell features that can be run from a repository #1742

BernieWhite opened this issue Jan 26, 2024 · 0 comments · Fixed by #1743
Assignees
Labels
enhancement New feature or request feature: core Issues that affect the core engine
Milestone

Comments

@BernieWhite
Copy link
Member

BernieWhite commented Jan 26, 2024

Provide an option to disable PowerShell-based rules and conventions from being run from the current repository.

This allows customers to harden security within their DevOps pipelines.

Expose an option (Execution.RestrictScriptSource) to:

  • Unrestricted - Allow running of PowerShell rules and conventions from the workspace and installed modules.
  • ModuleOnly - Allow running of PowerShell rules and conventions from installed modules only.
  • DisablePowerShell - Do not allow running of any PowerShell rules and conventions, only YAML and JSON based rules and resources will be allowed.

This will allow customers additional options above the existing Execution.LanguageMode option.

@BernieWhite BernieWhite added enhancement New feature or request feature: core Issues that affect the core engine labels Jan 26, 2024
@BernieWhite BernieWhite added this to the v3.0.0 milestone Jan 26, 2024
@BernieWhite BernieWhite self-assigned this Jan 26, 2024
BernieWhite added a commit to BernieWhite/PSRule that referenced this issue Jan 27, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request feature: core Issues that affect the core engine
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant