From 08016034393fe183f677632c770c7fd712a3c803 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 1 Jan 2023 23:00:42 +0000 Subject: [PATCH 1/5] Bump gitpython from 3.1.29 to 3.1.30 Bumps [gitpython](https://github.com/gitpython-developers/GitPython) from 3.1.29 to 3.1.30. - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](https://github.com/gitpython-developers/GitPython/compare/3.1.29...3.1.30) --- updated-dependencies: - dependency-name: gitpython dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 287491bfda..7def993376 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,6 +1,6 @@ attackcti==0.3.8 docker==6.0.0 -GitPython==3.1.29 +GitPython==3.1.30 Jinja2==3.1.2 jsonschema==4.17.3 mock==4.0.3 From eff29cbf9803f6014990504e6995d5e357de0f16 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 1 Jan 2023 23:00:45 +0000 Subject: [PATCH 2/5] Bump splunk-appinspect from 2.29.0 to 2.30.0 Bumps [splunk-appinspect](https://splunk.com) from 2.29.0 to 2.30.0. --- updated-dependencies: - dependency-name: splunk-appinspect dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 287491bfda..dcd1c7c417 100644 --- a/requirements.txt +++ b/requirements.txt @@ -12,7 +12,7 @@ PyYAML==5.4.1 questionary==1.10.0 requests==2.28.1 six==1.16.0 -splunk-appinspect==2.29.0 +splunk-appinspect==2.30.0 splunk-sdk==1.7.2 wrapt-timeout-decorator==1.3.12.2 xmltodict==0.13.0 From bd8f823260fe36c144cee81d322159cfec37c5b1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 1 Jan 2023 23:00:53 +0000 Subject: [PATCH 3/5] Bump pydantic from 1.10.2 to 1.10.4 Bumps [pydantic](https://github.com/pydantic/pydantic) from 1.10.2 to 1.10.4. - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v1.10.4/HISTORY.md) - [Commits](https://github.com/pydantic/pydantic/compare/v1.10.2...v1.10.4) --- updated-dependencies: - dependency-name: pydantic dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 287491bfda..faeec258b4 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,7 +6,7 @@ jsonschema==4.17.3 mock==4.0.3 psutil==5.9.4 pycvesearch==1.2 -pydantic==1.10.2 +pydantic==1.10.4 pytest==7.2.0 PyYAML==5.4.1 questionary==1.10.0 From 03b56599137d8baf3a381a5a2848c6ad805e8e92 Mon Sep 17 00:00:00 2001 From: pyth0n1c <87383215+pyth0n1c@users.noreply.github.com> Date: Thu, 5 Jan 2023 17:06:12 -0800 Subject: [PATCH 4/5] Upload test artifact/results after a scheduled test run. --- .github/workflows/detection-testing.yml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/.github/workflows/detection-testing.yml b/.github/workflows/detection-testing.yml index 76da04fb1f..08f42c76b2 100644 --- a/.github/workflows/detection-testing.yml +++ b/.github/workflows/detection-testing.yml @@ -270,6 +270,7 @@ jobs: python -m pip install -r requirements.txt - name: Merge Detections into single File + continue-on-error: true #Still keep running the rest of the workflow - it's just that all the tests didn't pass run: | source .venv/bin/activate cd bin/docker_detection_tester @@ -322,8 +323,8 @@ jobs: - name: Upload S3 Badge and Summary Artifacts for Nightly Scheduled Run if: ${{ github.event_name == 'schedule' }} run: | - cd bin/docker_detection_tester - python generate_detection_coverage_badge.py --input_summary_file summary_test_results.json --output_badge_file detection_coverage.svg --badge_string "Pass Rate" + #cd bin/docker_detection_tester + #python generate_detection_coverage_badge.py --input_summary_file summary_test_results.json --output_badge_file detection_coverage.svg --badge_string "Pass Rate" #Upload artifact (summary test results) @@ -335,7 +336,7 @@ jobs: #Upload artifact (test results coverage badge) - aws s3 cp detection_coverage.svg s3://security-content/reporting/detection_coverage.svg + #aws s3 cp detection_coverage.svg s3://security-content/reporting/detection_coverage.svg #Since these reside in a public bucket, no need to explicitly mark as public # make the file public since it is not by default From c7321f70b2d294f650322b71ebc96c53314a5aca Mon Sep 17 00:00:00 2001 From: pyth0n1c <87383215+pyth0n1c@users.noreply.github.com> Date: Tue, 10 Jan 2023 10:16:14 -0800 Subject: [PATCH 5/5] Update detection-testing.yml Accidentally removed change directory. We were not in the correct directory for the file we were trying to upload to S3. --- .github/workflows/detection-testing.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/detection-testing.yml b/.github/workflows/detection-testing.yml index 08f42c76b2..ff9c6e3ced 100644 --- a/.github/workflows/detection-testing.yml +++ b/.github/workflows/detection-testing.yml @@ -323,7 +323,7 @@ jobs: - name: Upload S3 Badge and Summary Artifacts for Nightly Scheduled Run if: ${{ github.event_name == 'schedule' }} run: | - #cd bin/docker_detection_tester + cd bin/docker_detection_tester #python generate_detection_coverage_badge.py --input_summary_file summary_test_results.json --output_badge_file detection_coverage.svg --badge_string "Pass Rate"