 pyth0n1c
|
7ee10654b9
|
Adding run_id to the download action.
|
2021-08-26 15:05:01 -07:00 |
|
|
pyth0n1c
|
57ca5d3ddc
|
Added dependencies for release-checks.
|
2021-08-26 14:43:54 -07:00 |
|
|
pyth0n1c
|
216ce46f57
|
Fixed checking for the existence of the tag canary.
|
2021-08-26 14:33:27 -07:00 |
|
|
pyth0n1c
|
48d4587f2b
|
Adding tag canary to gert workflow_run working correctly.
|
2021-08-26 14:31:08 -07:00 |
|
|
pyth0n1c
|
e00100eb83
|
Removed incorrect 'needs' from the release yml file
|
2021-08-26 13:00:55 -07:00 |
|
|
pyth0n1c
|
50cfcd0b51
|
Fixed parameters for when release-checks workflow_run runs. It doesn't run on a branch because tags/releases are on any branch.
|
2021-08-26 12:12:27 -07:00 |
|
|
pyth0n1c
|
8ede691e4b
|
For testing purposes, added release-checks.yml running on WorkflowSplit branch.
|
2021-08-26 12:01:10 -07:00 |
|
|
pyth0n1c
|
2852018754
|
Changed S3 pushes to test buckets for smoketesting of new release-checks.yml
|
2021-08-26 11:34:41 -07:00 |
|
|
pyth0n1c
|
b2709ac415
|
Updated semgrep to generate and upload an output file because the semgrep repo/action has been fixed.
|
2021-08-26 11:20:25 -07:00 |
|
|
pyth0n1c
|
7365c7c5a9
|
Checks that happen on release (like appinspect and updating S3)
|
2021-08-26 11:15:46 -07:00 |
|
|
pyth0n1c
|
000e3ff036
|
Split validate-and-build into two separate files. Changed detection-testing to run on each commit instead of only tag. Detection testing also runs on current branch, not just develop.
|
2021-08-26 11:14:39 -07:00 |
|
|
pyth0n1c
|
8681ca59d2
|
Rolling back to previous requirements.txt file.
|
2021-08-18 11:36:31 -07:00 |
|
|
pyth0n1c
|
12b95f5a3a
|
Using pip to update all the requirements and save off the versions as an artifact.
|
2021-08-18 11:27:50 -07:00 |
|
|
pyth0n1c
|
291af648bb
|
Make sure we store report on appsinpect failure.
|
2021-08-17 12:11:56 -07:00 |
|
|
pyth0n1c
|
0dd4c8ef65
|
Put requirement on tag validation for detection-testing.
|
2021-08-17 10:36:08 -07:00 |
|
|
pyth0n1c
|
2fde2fe090
|
Fixed bash if else syntax
|
2021-08-17 09:55:52 -07:00 |
|
|
pyth0n1c
|
08d935a15d
|
Fixing the set-output calls
|
2021-08-17 09:50:02 -07:00 |
|
|
pyth0n1c
|
c7cab850e9
|
Finally fixed getting the tag/branch name properly.
|
2021-08-17 09:39:59 -07:00 |
|
|
pyth0n1c
|
0141d689a6
|
Fixed the tag name again.:
|
2021-08-17 09:28:21 -07:00 |
|
|
pyth0n1c
|
aae755c578
|
New syntax to fix tag name for build sources step when running on non-tagged release.
|
2021-08-17 09:25:48 -07:00 |
|
|
pyth0n1c
|
5b47f3bff9
|
Fixed getting branch name/tag name for build-sources.
|
2021-08-16 16:55:27 -07:00 |
|
|
pyth0n1c
|
be6bffca01
|
Including the proper python interpreter and installing any requirements for it.
|
2021-08-16 16:34:57 -07:00 |
|
|
pyth0n1c
|
7d5edec822
|
Added calling of the create_baseline_folder.py script.
|
2021-08-16 16:22:35 -07:00 |
|
|
pyth0n1c
|
87e1ef6dca
|
Changed all of the python versions from 3.9.5 to 3.9. We want the latest patch. If we just include the MAJOR.MINOR, the latest patch will always be used.
|
2021-08-16 13:06:13 -07:00 |
|
|
pyth0n1c
|
b7212b6781
|
Finally fixed the tag name - was forgetitng to include id:vars
|
2021-08-13 12:03:30 -07:00 |
|
|
pyth0n1c
|
11179c57a1
|
Now we fixed the tag i think
|
2021-08-13 11:57:29 -07:00 |
|
|
pyth0n1c
|
e1e3a3a91b
|
Fixing tag value again
|
2021-08-13 11:49:26 -07:00 |
|
|
pyth0n1c
|
f93fb88b47
|
other tag get syntax
|
2021-08-13 11:44:04 -07:00 |
|
|
pyth0n1c
|
57d21063df
|
Printing out the whole github ref.
|
2021-08-13 11:37:05 -07:00 |
|
|
pyth0n1c
|
4528e9a6fd
|
Was getting the tag the wrong way and it was coming up empty. Fixed. Running again.
|
2021-08-13 10:54:18 -07:00 |
|
|
pyth0n1c
|
94f0b4b329
|
Fixed the naming of the release artifacts with the proper GitHub Actions Variable.
|
2021-08-13 10:07:52 -07:00 |
|
|
pyth0n1c
|
ff9ee4c7c9
|
Fixed appinspect report.tar.gz path.
|
2021-08-13 09:08:02 -07:00 |
|
|
pyth0n1c
|
13e6f885d6
|
Fixing the path for the appinspect report one last time.
|
2021-08-12 16:54:23 -07:00 |
|
|
pyth0n1c
|
6c427d9f7c
|
Wrong path for report.tar.gz
|
2021-08-12 16:27:43 -07:00 |
|
|
pyth0n1c
|
b6b5f9317f
|
Using the proper commandline to generate sha256 checksum of files. Added autoescaping to the Jinja2 templates in response to semgrep results.
|
2021-08-12 13:26:29 -07:00 |
|
|
pyth0n1c
|
9d32f23bbc
|
Removed a large block of commented out code.
|
2021-08-12 13:04:16 -07:00 |
|
|
pyth0n1c
|
6d100dbcc9
|
Uploading additional release artifacts. Moved away from ghr and to an action designed for attaching github release artifacts. This will only run for tagged releases.
|
2021-08-12 13:03:15 -07:00 |
|
|
pyth0n1c
|
1cf0f63d8f
|
Merge branch 'develop' of https://github.com/pyth0n1c/security_content into develop
|
2021-08-12 12:20:08 -07:00 |
|
|
pyth0n1c
|
a875e38d08
|
Renamed a store_artifacts step
|
2021-08-12 12:20:02 -07:00 |
|
|
pyth0n1c
|
4a94db95c2
|
Turned off file output from semgrep - current bug prevents anything from being written. it is okay when it is writted to stdout.
|
2021-08-12 10:18:22 -07:00 |
|
|
pyth0n1c
|
f2fa2bf079
|
Apparently, unless specified otherwise, exit returns most recent return code. Explicitly have it return 0 on success.
|
2021-08-10 11:56:02 -07:00 |
|
|
pyth0n1c
|
e8b49a3228
|
Better, more verbose tag checking for all the yml
|
2021-08-10 11:53:38 -07:00 |
|
|
pyth0n1c
|
67c4c1fdb2
|
More verbose tag checking.
|
2021-08-10 11:51:30 -07:00 |
|
|
pyth0n1c
|
9c22253318
|
Adding the tag check to the semgrep.yml. Printing our the GITHUB_REF before checking it, because we seem to be failing for some reason on regular pushes.
|
2021-08-10 11:45:57 -07:00 |
|
|
pyth0n1c
|
2cb62a0cd9
|
Legacy code that tried to push to the tag instead of develop
|
2021-08-10 11:39:06 -07:00 |
|
|
pyth0n1c
|
98f4f725c8
|
Changed all of the jobs which require tags to always checkout from develop. This will also allow update-sources-github to push to develop.
|
2021-08-10 11:05:53 -07:00 |
|
|
pyth0n1c
|
1eddb135e9
|
Added version=1.1 attributes to the forms to conform with new appinspect security requirements. Also changed the name of the report_failed uploaded report on failure.
|
2021-08-10 10:39:01 -07:00 |
|
|
pyth0n1c
|
1372bc0e8c
|
Store the appinspect report under a different name if it fails
|
2021-08-10 09:47:33 -07:00 |
|
|
pyth0n1c
|
4270461242
|
Was not printing out the report correctly.
|
2021-08-09 18:10:23 -07:00 |
|
|
pyth0n1c
|
b4b15339fc
|
Printing out the report so that we can figure out what appinspect didn't like
|
2021-08-09 17:53:45 -07:00 |
|