Default Policy

The simplest way to use GHASCompliance is to use the Default Policy.

name: Default Policy

# Code Scanning policy
codescanning:
  level: error

# Dependency Security Alerts (dependabot) policy
dependabot:
  level: high

# Dependency Licensing Alerts (dependency graph) policy
licensing:
  conditions:
    ids:
      - GPL-*
      - LGPL-*
      - AGPL-*

  warnings:
    # Warning is the dependency isn't known
    ids:
      - Other
      - NA

# Dependency usage Alerts (dependency graph) policy
# dependencies:

# Secret Scanning Alerts policyS
secretscanning:
  level: all