Commit Graph

503 Commits

Author SHA1 Message Date
pyth0n1c 000e3ff036 Split validate-and-build into two separate files. Changed detection-testing to run on each commit instead of only tag. Detection testing also runs on current branch, not just develop. 2021-08-26 11:14:39 -07:00
pyth0n1c 8681ca59d2 Rolling back to previous requirements.txt file. 2021-08-18 11:36:31 -07:00
pyth0n1c 12b95f5a3a Using pip to update all the requirements and save off the versions as an artifact. 2021-08-18 11:27:50 -07:00
pyth0n1c 291af648bb Make sure we store report on appsinpect failure. 2021-08-17 12:11:56 -07:00
pyth0n1c 0dd4c8ef65 Put requirement on tag validation for detection-testing. 2021-08-17 10:36:08 -07:00
pyth0n1c 2fde2fe090 Fixed bash if else syntax 2021-08-17 09:55:52 -07:00
pyth0n1c 08d935a15d Fixing the set-output calls 2021-08-17 09:50:02 -07:00
pyth0n1c c7cab850e9 Finally fixed getting the tag/branch name properly. 2021-08-17 09:39:59 -07:00
pyth0n1c 0141d689a6 Fixed the tag name again.: 2021-08-17 09:28:21 -07:00
pyth0n1c aae755c578 New syntax to fix tag name for build sources step when running on non-tagged release. 2021-08-17 09:25:48 -07:00
pyth0n1c 5b47f3bff9 Fixed getting branch name/tag name for build-sources. 2021-08-16 16:55:27 -07:00
pyth0n1c be6bffca01 Including the proper python interpreter and installing any requirements for it. 2021-08-16 16:34:57 -07:00
pyth0n1c 7d5edec822 Added calling of the create_baseline_folder.py script. 2021-08-16 16:22:35 -07:00
pyth0n1c 87e1ef6dca Changed all of the python versions from 3.9.5 to 3.9. We want the latest patch. If we just include the MAJOR.MINOR, the latest patch will always be used. 2021-08-16 13:06:13 -07:00
pyth0n1c b7212b6781 Finally fixed the tag name - was forgetitng to include id:vars 2021-08-13 12:03:30 -07:00
pyth0n1c 11179c57a1 Now we fixed the tag i think 2021-08-13 11:57:29 -07:00
pyth0n1c e1e3a3a91b Fixing tag value again 2021-08-13 11:49:26 -07:00
pyth0n1c f93fb88b47 other tag get syntax 2021-08-13 11:44:04 -07:00
pyth0n1c 57d21063df Printing out the whole github ref. 2021-08-13 11:37:05 -07:00
pyth0n1c 4528e9a6fd Was getting the tag the wrong way and it was coming up empty. Fixed. Running again. 2021-08-13 10:54:18 -07:00
pyth0n1c 94f0b4b329 Fixed the naming of the release artifacts with the proper GitHub Actions Variable. 2021-08-13 10:07:52 -07:00
pyth0n1c ff9ee4c7c9 Fixed appinspect report.tar.gz path. 2021-08-13 09:08:02 -07:00
pyth0n1c 13e6f885d6 Fixing the path for the appinspect report one last time. 2021-08-12 16:54:23 -07:00
pyth0n1c 6c427d9f7c Wrong path for report.tar.gz 2021-08-12 16:27:43 -07:00
pyth0n1c b6b5f9317f Using the proper commandline to generate sha256 checksum of files. Added autoescaping to the Jinja2 templates in response to semgrep results. 2021-08-12 13:26:29 -07:00
pyth0n1c 9d32f23bbc Removed a large block of commented out code. 2021-08-12 13:04:16 -07:00
pyth0n1c 6d100dbcc9 Uploading additional release artifacts. Moved away from ghr and to an action designed for attaching github release artifacts. This will only run for tagged releases. 2021-08-12 13:03:15 -07:00
pyth0n1c 1cf0f63d8f Merge branch 'develop' of https://github.com/pyth0n1c/security_content into develop 2021-08-12 12:20:08 -07:00
pyth0n1c a875e38d08 Renamed a store_artifacts step 2021-08-12 12:20:02 -07:00
pyth0n1c 4a94db95c2 Turned off file output from semgrep - current bug prevents anything from being written. it is okay when it is writted to stdout. 2021-08-12 10:18:22 -07:00
pyth0n1c f2fa2bf079 Apparently, unless specified otherwise, exit returns most recent return code. Explicitly have it return 0 on success. 2021-08-10 11:56:02 -07:00
pyth0n1c e8b49a3228 Better, more verbose tag checking for all the yml 2021-08-10 11:53:38 -07:00
pyth0n1c 67c4c1fdb2 More verbose tag checking. 2021-08-10 11:51:30 -07:00
pyth0n1c 9c22253318 Adding the tag check to the semgrep.yml. Printing our the GITHUB_REF before checking it, because we seem to be failing for some reason on regular pushes. 2021-08-10 11:45:57 -07:00
pyth0n1c 2cb62a0cd9 Legacy code that tried to push to the tag instead of develop 2021-08-10 11:39:06 -07:00
pyth0n1c 98f4f725c8 Changed all of the jobs which require tags to always checkout from develop. This will also allow update-sources-github to push to develop. 2021-08-10 11:05:53 -07:00
pyth0n1c 1eddb135e9 Added version=1.1 attributes to the forms to conform with new appinspect security requirements. Also changed the name of the report_failed uploaded report on failure. 2021-08-10 10:39:01 -07:00
pyth0n1c 1372bc0e8c Store the appinspect report under a different name if it fails 2021-08-10 09:47:33 -07:00
pyth0n1c 4270461242 Was not printing out the report correctly. 2021-08-09 18:10:23 -07:00
pyth0n1c b4b15339fc Printing out the report so that we can figure out what appinspect didn't like 2021-08-09 17:53:45 -07:00
pyth0n1c 1338335c9f Removed duplicate of the semgrep testing flow. 2021-08-09 17:27:40 -07:00
pyth0n1c ed50f77308 Changing the way that we validate the tag name for a tagged release. 2021-08-09 17:22:45 -07:00
pyth0n1c eecfdf786a Merging the migrate_to_github_actions in the develop branch - everything looking good?
Merge commit '274c1dd9a94498ae0b16fcf2eec3acf81c1e5f0d' into develop
2021-08-09 16:41:00 -07:00
pyth0n1c 274c1dd9a9 Just added a check for tag validation and put it at the beginning of all the workflows. 2021-08-09 16:33:10 -07:00
pyth0n1c 2ca826e4d9 Uncommented all the tests from before that were commented... making sure that the file lints and runs correctly before merging it into the develop branch. 2021-08-09 15:30:11 -07:00
pyth0n1c 981a894c34 Wrong argument to checkout - ref not branch 2021-08-09 13:53:09 -07:00
pyth0n1c ce714fb714 Forgot to add username and email before committing. 2021-08-09 13:46:01 -07:00
pyth0n1c 607b5955ec After our discussion, making everything much simpler by always pushing to develop. Test to see if this works. 2021-08-09 13:43:12 -07:00
pyth0n1c 81fb796b51 show-ref not git-ref 2021-08-09 11:21:15 -07:00
pyth0n1c 8557f7f4ed git-ref printout 2021-08-09 11:18:06 -07:00