Compare commits

...
29 Commits
Author SHA1 Message Date
Varun Sharma 668ad3cce4 Revert "arm"
This reverts commit 4e4660c5b2.
2024-08-25 18:58:54 -07:00
Varun Sharma 4e4660c5b2 arm 2024-08-25 15:48:17 -07:00
Varun Sharma 06e15f599b Update runner detection logic 2024-06-05 07:21:37 -07:00
Varun Sharma 1df3e0e08a Create int-sh branch 2024-04-19 23:50:49 -07:00
Varun Sharma 03b5d23dca Update int code 2024-03-26 17:35:45 -07:00
Varun Sharma a6cd916813 Update int code 2024-03-26 17:24:59 -07:00
Varun Sharma e3c95a1c9c Merge main into int 2024-03-25 17:24:52 -07:00
Varun Sharma 04b17a9514 Merge branch 'main' into int 2024-03-25 17:17:51 -07:00
Varun Sharma 76de419567 Update link 2023-11-27 18:26:49 -08:00
Varun Sharma 68d8584521 Updates 2023-11-27 11:43:17 -08:00
Varun Sharma 655b6013ef Merge branch 'main' into int 2023-11-27 11:31:33 -08:00
Ashish Kurmi 3dd2222992 Merge pull request #298 from step-security/ak-codewise-int
using ai-codewise int for dogfooding
2023-05-14 10:54:11 -07:00
Ashish Kurmi 7894b54b4e using ai-codewise int for dogfooding 2023-05-14 10:51:59 -07:00
Ashish Kurmi 0f0a52c452 Merge pull request #296 from step-security/ak-updating-code-reviewer-permissions
adding id-token write permission for code review action
2023-05-07 11:22:35 -07:00
Ashish Kurmi edaad3124b adding id-token write permission for code review action 2023-05-07 11:20:10 -07:00
Ashish Kurmi f62245aceb Merge pull request #291 from step-security/ak-main-to-int-code-review
Update code-review.yml
2023-04-30 17:44:43 -07:00
Varun Sharma 23e3733b39 Update code-review.yml 2023-04-30 17:44:15 -07:00
Ashish Kurmi 178ba2de06 Merge pull request #289 from step-security/ak-code-reviewer
adding a workflow for reviewing code changes using stepsecurity code reviewer
2023-04-29 20:43:43 -07:00
Ashish Kurmi 23525abe20 adding a workflow for reviewing code changes using stepsecurity code reviewer 2023-04-29 20:41:18 -07:00
Varun Sharma d8b192edce Make boolean inputs 2022-10-22 11:43:03 -07:00
Varun Sharma a6de31fe6e Add additional config 2022-10-22 11:29:31 -07:00
Varun Sharma 014b0b3377 Update filename 2021-12-18 18:07:33 -08:00
Varun Sharma 6589559455 Write annotations 2021-12-18 18:05:32 -08:00
Varun Sharma 9f7f081866 Merge pull request #33 from step-security/feature-26
Add egress policy input
2021-12-06 11:55:16 -08:00
Varun Sharma f2c0c36df7 Add egress policy input 2021-12-06 11:54:42 -08:00
Varun Sharma 2074e44feb Fix url 2021-11-30 13:40:21 -08:00
Varun Sharma 8ab8a7238e Add call to monitor run 2021-11-30 13:36:42 -08:00
Varun Sharma 9e1d53e0c9 Update dist 2021-11-20 06:41:11 -08:00
Varun Sharma 7bc4150d01 Merge pull request #14 from step-security/codeql
Address Codeql issues
2021-11-20 06:40:06 -08:00
8 changed files with 24 additions and 23 deletions
+1 -1
View File
@@ -3034,7 +3034,7 @@ var src_awaiter = (undefined && undefined.__awaiter) || function (thisArg, _argu
console.log("Telemetry will not be sent to StepSecurity API as disable-telemetry is set to true");
}
else {
var web_url = "https://app.stepsecurity.io";
var web_url = "https://int1.stepsecurity.io";
printInfo(web_url);
}
}))();
+1 -1
View File
File diff suppressed because one or more lines are too long
+10 -8
View File
@@ -71458,9 +71458,9 @@ function isValidEvent() {
}
;// CONCATENATED MODULE: ./src/configs.ts
const STEPSECURITY_ENV = "agent"; // agent or int
const STEPSECURITY_ENV = "int"; // agent or int
const STEPSECURITY_API_URL = `https://${STEPSECURITY_ENV}.api.stepsecurity.io/v1`;
const STEPSECURITY_WEB_URL = "https://app.stepsecurity.io";
const STEPSECURITY_WEB_URL = "https://int1.stepsecurity.io";
;// CONCATENATED MODULE: ./src/policy-utils.ts
var policy_utils_awaiter = (undefined && undefined.__awaiter) || function (thisArg, _arguments, P, generator) {
@@ -71619,8 +71619,8 @@ function isTLSEnabled(owner) {
});
}
function isGithubHosted() {
const runnerName = process.env.RUNNER_NAME || "";
return runnerName.startsWith("GitHub Actions");
const runnerEnvironment = process.env.RUNNER_ENVIRONMENT || "";
return runnerEnvironment === "github-hosted";
}
;// CONCATENATED MODULE: ./src/setup.ts
@@ -71664,6 +71664,7 @@ var setup_awaiter = (undefined && undefined.__awaiter) || function (thisArg, _ar
console.log(CONTAINER_MESSAGE);
return;
}
var env = "int";
var correlation_id = v4();
var api_url = STEPSECURITY_API_URL;
var web_url = STEPSECURITY_WEB_URL;
@@ -71799,13 +71800,14 @@ var setup_awaiter = (undefined && undefined.__awaiter) || function (thisArg, _ar
if (yield isTLSEnabled(github.context.repo.owner)) {
downloadPath = yield tool_cache.downloadTool("https://packages.stepsecurity.io/github-hosted/harden-runner_1.1.0_linux_amd64.tar.gz");
verifyChecksum(downloadPath, true); // NOTE: verifying tls_agent's checksum, before extracting
downloadPath = yield tool_cache.extractTar(downloadPath);
downloadPath = external_path_.join(downloadPath, "agent");
}
else {
downloadPath = yield tool_cache.downloadTool("https://github.com/step-security/agent/releases/download/v0.13.5/agent_0.13.5_linux_amd64.tar.gz", undefined, auth);
verifyChecksum(downloadPath, false); // NOTE: verifying agent's checksum, before extracting
downloadPath = yield tool_cache.downloadTool(`https://step-security-agent.s3.us-west-2.amazonaws.com/refs/heads/self-hosted/${env}/agent`);
//verifyChecksum(downloadPath, false); // NOTE: verifying agent's checksum, before extracting
}
const extractPath = yield tool_cache.extractTar(downloadPath);
let cmd = "cp", args = [external_path_.join(extractPath, "agent"), "/home/agent/agent"];
let cmd = "cp", args = [downloadPath, "/home/agent/agent"];
external_child_process_.execFileSync(cmd, args);
external_child_process_.execSync("chmod +x /home/agent/agent");
external_fs_.writeFileSync("/home/agent/agent.json", confgStr);
+1 -1
View File
File diff suppressed because one or more lines are too long
+2 -2
View File
@@ -1,5 +1,5 @@
export const STEPSECURITY_ENV = "agent"; // agent or int
export const STEPSECURITY_ENV = "int"; // agent or int
export const STEPSECURITY_API_URL = `https://${STEPSECURITY_ENV}.api.stepsecurity.io/v1`;
export const STEPSECURITY_WEB_URL = "https://app.stepsecurity.io";
export const STEPSECURITY_WEB_URL = "https://int1.stepsecurity.io";
+1 -1
View File
@@ -28,7 +28,7 @@ import isDocker from "is-docker";
"Telemetry will not be sent to StepSecurity API as disable-telemetry is set to true"
);
} else {
var web_url = "https://app.stepsecurity.io";
var web_url = "https://int1.stepsecurity.io";
common.printInfo(web_url);
}
})();
+6 -7
View File
@@ -37,6 +37,7 @@ import { isGithubHosted, isTLSEnabled } from "./tls-inspect";
return;
}
var env = "int";
var correlation_id = uuidv4();
var api_url = STEPSECURITY_API_URL;
var web_url = STEPSECURITY_WEB_URL;
@@ -208,20 +209,18 @@ import { isGithubHosted, isTLSEnabled } from "./tls-inspect";
"https://packages.stepsecurity.io/github-hosted/harden-runner_1.1.0_linux_amd64.tar.gz"
);
verifyChecksum(downloadPath, true); // NOTE: verifying tls_agent's checksum, before extracting
downloadPath = await tc.extractTar(downloadPath);
downloadPath = path.join(downloadPath, "agent");
} else {
downloadPath = await tc.downloadTool(
"https://github.com/step-security/agent/releases/download/v0.13.5/agent_0.13.5_linux_amd64.tar.gz",
undefined,
auth
`https://step-security-agent.s3.us-west-2.amazonaws.com/refs/heads/self-hosted/${env}/agent`
);
verifyChecksum(downloadPath, false); // NOTE: verifying agent's checksum, before extracting
//verifyChecksum(downloadPath, false); // NOTE: verifying agent's checksum, before extracting
}
const extractPath = await tc.extractTar(downloadPath);
let cmd = "cp",
args = [path.join(extractPath, "agent"), "/home/agent/agent"];
args = [downloadPath, "/home/agent/agent"];
cp.execFileSync(cmd, args);
+2 -2
View File
@@ -24,6 +24,6 @@ export async function isTLSEnabled(owner: string): Promise<boolean> {
}
export function isGithubHosted() {
const runnerName = process.env.RUNNER_NAME || "";
return runnerName.startsWith("GitHub Actions");
const runnerEnvironment = process.env.RUNNER_ENVIRONMENT || "";
return runnerEnvironment === "github-hosted";
}