Local CodeCollection Git Cache Configuration
If your environment does not allow access to github.com, the RunWhen Local container image does provide a local Git cache for all of the default CodeCollections. In order to use this feature, set useLocalGit: true in the RunWhen Local workspaceInfo.yaml file.
defaultLocation: none
workspaceOwnerEmail: tester@my-company.com
defaultLOD: detailed
cloudConfig:
kubernetes:
inClusterAuth: true
codeCollections: []
useLocalGit: true
Excluding Task Discovery by Tag
Each task in a CodeBundle has tag metadata. This will often carry a tag with the type of access is requires to perform the task. There are often two major tags here, such as access:read-only and access:read-write. The default Helm installation configuration will automatically ignore access:read-write tasks as configured in the workspaceInfo.yaml. For example:
defaultLocation: none
workspaceOwnerEmail: tester@my-company.com
defaultLOD: detailed
cloudConfig:
kubernetes:
inClusterAuth: true
codeCollections: []
taskTagExclusions:
- "access:read-write"
To add tasks that can perform remediation tasks, this configuration can be removed. To add additional task tags for exclusion, simply add to the list. With this configuration change applied, CodeBundles will never be added to your RunWhen workspace that include such task tags.