rules: add AWS Secrets Manager BatchGetSecretValue bulk retrieval (T1555.006) #5294
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Greet First-Time Contributors | |
| on: | |
| pull_request_target: | |
| types: | |
| - opened | |
| issues: | |
| types: | |
| - opened | |
| permissions: | |
| issues: write | |
| pull-requests: write | |
| jobs: | |
| greeting: | |
| name: Greet First-Time Contributors | |
| if: github.event_name == 'issues' || (github.event_name == 'pull_request_target' && github.event.pull_request.head.repo.full_name != github.repository) | |
| runs-on: ubuntu-latest | |
| steps: | |
| # Reverted from actions/first-interaction@v3 back to v1 due to a known upstream bug | |
| # where all contributors are greeted (not just first-timers) in repos with GitHub | |
| # Issues disabled, because isFirstIssue() always returns true in that case. | |
| # See: https://github.com/actions/first-interaction/issues/369 | |
| - uses: actions/first-interaction@34f15e814fe48ac9312ccf29db4e74fa767cbab7 # v1.3.0 | |
| with: | |
| repo-token: ${{ secrets.GITHUB_TOKEN }} | |
| issue-message: | | |
| Welcome @${{ github.actor }} :wave: | |
| It looks like this is your first issue on the Sigma rules repository! | |
| The following repository accepts issues related to `false positives` or `rule ideas`. | |
| If you're reporting an issue related to the pySigma library please consider submitting it [here](https://github.com/SigmaHQ/pySigma) | |
| Thanks for taking the time to open this issue, and welcome to the Sigma community! :smiley: | |
| If you want to engage more with the community for official support, general discussions or announcements: | |
| 👉 [Join our Discord server](https://discord.gg/UcDN25s8) | |
| pr-message: | | |
| Welcome @${{ github.actor }} :wave: | |
| It looks like this is your first pull request on the Sigma rules repository! | |
| Please make sure to read the [SigmaHQ conventions](https://github.com/SigmaHQ/sigma-specification/blob/main/sigmahq/) to make sure your contribution is adhering to best practices and has all the necessary elements in place for a successful approval. | |
| Thanks again, and welcome to the Sigma community! :smiley: | |
| If you want to engage more with the community for official support, general discussions or announcements: | |
| 👉 [Join our Discord server](https://discord.gg/UcDN25s8) |