renovate[bot]
3a90ee3ca9
fix(deps): update module github.com/hashicorp/vault to v1.14.1 [security] ( #4550 )
...
* fix(deps): update module github.com/hashicorp/vault to v1.14.3 [security]
* update to v1.14.1 instead due to Go version
* github.com/hashicorp/vault@v1.14.1
* go mod tidy
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: jliempt <>
Co-authored-by: Jordi van Liempt <35920075+jliempt@users.noreply.github.com>
2023-10-13 16:23:31 +02:00
dependabot[bot]
d238a79ad1
build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 ( #4628 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.15.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.15.0...v0.17.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-13 15:37:37 +02:00
renovate[bot]
9b6a465111
fix(deps): update module golang.org/x/oauth2 to v0.12.0 ( #4584 )
...
* fix(deps): update module golang.org/x/oauth2 to v0.12.0
* run go mod tidy
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: jliempt <>
2023-09-22 09:15:13 +02:00
renovate[bot]
040cb4b6b9
fix(deps): update github.com/bndr/gojenkins digest to 45fe314 ( #4445 )
...
* fix(deps): update github.com/bndr/gojenkins digest to 45fe314
* run go mod tidy
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: jliempt <>
2023-09-21 16:00:57 +02:00
Aaron Schweig
20b3c0d728
chore: ⬆️ upgrade to golang.org/x/mod/modfile v0.12.0 to enable the usage of go >1.21 ( #4558 )
...
* chore: ⬆️ upgrade to golang.org/x/mod/modfile v0.12.0 to enable the usage of go >1.21
* chore: run
---------
Co-authored-by: Jk1484 <35270240+Jk1484@users.noreply.github.com>
2023-09-13 15:38:19 +05:00
renovate[bot]
67bcada96a
fix(deps): update module github.com/hashicorp/vault to v1.14.0 [security] ( #4427 )
...
* fix(deps): update module github.com/hashicorp/vault to v1.13.5 [security]
* fix(deps): update module github.com/Azure/azure-sdk-for-go/tree/sdk/storage/azblob to v0.4.1
* fix(deps): update module github.com/hashicorp/vault/sdk to v0.9.2
fix(deps): update module oras.land/oras-go to v1.2.3
* fix(deps): update module github.com/hashicorp/vault/sdk to v0.9.2-0.20230530190758-08ee474850e0
fix(deps): update module github.com/hashicorp/vault/sdk to v0.9.2-0.20230530190758-08ee474850e0
* replacing deprecated function
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Muhammadali Nazarov <muhammadalinazarov@gmail.com>
Co-authored-by: Jordi van Liempt <35920075+jliempt@users.noreply.github.com>
2023-09-06 13:12:51 +05:00
renovate[bot]
4cdab6e5fb
fix(deps): update module github.com/google/uuid to v1.3.1 ( #4532 )
...
* fix(deps): update module github.com/google/uuid to v1.3.1
* run go mod tidy
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Muhammadali Nazarov <muhammadalinazarov@gmail.com>
Co-authored-by: Jordi van Liempt <35920075+jliempt@users.noreply.github.com>
2023-08-29 16:37:00 +02:00
Jk1484
e54d603898
chore(deps): update golang version to 1.19 ( #4533 )
...
Co-authored-by: I557621 <jordi.van.liempt@sap.com>
2023-08-23 16:29:02 +02:00
dependabot[bot]
fe1068b778
build(deps): bump github.com/docker/docker ( #4319 )
...
Bumps [github.com/docker/docker](https://github.com/docker/docker ) from 20.10.17+incompatible to 20.10.24+incompatible.
- [Release notes](https://github.com/docker/docker/releases )
- [Commits](https://github.com/docker/docker/compare/v20.10.17...v20.10.24 )
---
updated-dependencies:
- dependency-name: github.com/docker/docker
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-04 08:44:25 +02:00
Pavel Busko
610e212306
feat(cnbBuild) Add support for pre and post-buildpacks ( #4448 )
...
* Add pre and post buildpacks
Co-authored-by: Johannes Dillmann <j.dillmann@sap.com>
Co-authored-by: Ralf Pannemans <ralf.pannemans@sap.com>
Co-authored-by: Pavel Busko <pavel.busko@sap.com>
* fix integration tests
Co-authored-by: Pavel Busko <pavel.busko@sap.com>
Co-authored-by: Ralf Pannemans <ralf.pannemans@sap.com>
* simplify if clauses
Co-authored-by: Pavel Busko <pavel.busko@sap.com>
---------
Co-authored-by: Johannes Dillmann <j.dillmann@sap.com>
Co-authored-by: Ralf Pannemans <ralf.pannemans@sap.com>
2023-07-06 11:34:05 +02:00
dependabot[bot]
fa11eb47aa
build(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.5 ( #4307 )
...
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc ) from 1.1.2 to 1.1.5.
- [Release notes](https://github.com/opencontainers/runc/releases )
- [Changelog](https://github.com/opencontainers/runc/blob/v1.1.5/CHANGELOG.md )
- [Commits](https://github.com/opencontainers/runc/compare/v1.1.2...v1.1.5 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jordi van Liempt <35920075+jliempt@users.noreply.github.com>
2023-07-04 16:10:54 +02:00
dependabot[bot]
c7ab4240e9
build(deps): bump github.com/docker/distribution ( #4359 )
...
Bumps [github.com/docker/distribution](https://github.com/docker/distribution ) from 2.8.1+incompatible to 2.8.2+incompatible.
- [Release notes](https://github.com/docker/distribution/releases )
- [Commits](https://github.com/docker/distribution/compare/v2.8.1...v2.8.2 )
---
updated-dependencies:
- dependency-name: github.com/docker/distribution
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jordi van Liempt <35920075+jliempt@users.noreply.github.com>
2023-07-04 13:00:11 +00:00
Jordi van Liempt
e3935ca088
feat(vault): Vault secret rotation for GH Actions ( #4280 )
...
* rotate Vault secret on GH Actions
* test alternative sodium package
* try doing it without libsodium
* disable validity check for testing purposes
* basic unit test
* re-enable secret validity check
* tidy
* tidy parameters
* forgot to update param names in code
* apply review feedback
* improve error logging
* update step metadata
* apply metadata suggestion from review
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com>
* align githubToken param
* Fix secretStore
* Add alias for githubToken
* Move logic to separate file
---------
Co-authored-by: I557621 <jordi.van.liempt@sap.com>
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com>
Co-authored-by: Vyacheslav Starostin <vyacheslav.starostin@sap.com>
2023-04-17 08:35:13 +02:00
dependabot[bot]
bb0da58cf9
build(deps): bump golang.org/x/net ( #4254 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.0.0-20220722155237-a158d28d115b to 0.7.0.
- [Release notes](https://github.com/golang/net/releases )
- [Commits](https://github.com/golang/net/commits/v0.7.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-01 09:05:33 +01:00
dependabot[bot]
ffffb23dc5
build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.18 ( #4234 )
...
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd ) from 1.6.6 to 1.6.18.
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.6.6...v1.6.18 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-01 08:54:29 +01:00
Vyacheslav Starostin
9aac0ae06c
GHActions: Add the possibility to fetch logs ( #4250 )
...
* Initial commit
* getStageId added
* setting token for orchestrator
* Add possibility to fetch logs (GHActions)
* Update
* Clean up: delete test log file
* go mod tidy
* Rename token
* Rename token
* Apply suggestion from code review
* Update
* Correct err msg
* Add new line
* Update pkg/orchestrator/gitHubActions.go
Co-authored-by: ffeldmann <f.feldmann@sap.com>
* Update pkg/orchestrator/gitHubActions.go
Co-authored-by: ffeldmann <f.feldmann@sap.com>
* Update pkg/orchestrator/gitHubActions.go
Co-authored-by: ffeldmann <f.feldmann@sap.com>
* Add httpHeader variable && little updates
* Clean up
* Make structs unexported
---------
Co-authored-by: Aibyn Sadu <aibaend@yandex.ru>
Co-authored-by: ffeldmann <f.feldmann@sap.com>
2023-03-01 10:38:40 +06:00
Ralf Pannemans
906512a162
feat(cnbbuild): allow bindings to have multiple keys ( #4231 )
...
Co-authored-by: Ralf Pannemans <ralf.pannemans@sap.com>
Co-authored-by: Pavel Busko <pavel.busko@sap.com>
2023-02-16 15:29:08 +01:00
dependabot[bot]
a3e8a54540
build(deps): bump helm.sh/helm/v3 from 3.9.4 to 3.10.3 ( #4163 )
...
Bumps [helm.sh/helm/v3](https://github.com/helm/helm ) from 3.9.4 to 3.10.3.
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.9.4...v3.10.3 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-04 16:45:54 +01:00
Vyacheslav Starostin
be5adf4ff2
artifactPrepareVersion doesn’t change the order of entries in the package.json (#4178 )
...
* Update versioning package
* Clean up
2023-01-04 19:29:03 +06:00
Pavel Busko
63a79c9e41
feat(cnbBuild) generate SBOM files with syft ( #4150 )
...
* feat(cnbBuild) generate SBOM files with syft
Co-authored-by: Pavel Busko <pavel.busko@sap.com>
Co-authored-by: Sumit Kulhadia <sumit.kulhadia@sap.com>
2022-12-13 10:51:14 +01:00
dependabot[bot]
2f15330dcc
chore(deps): bump helm.sh/helm/v3 from 3.8.0 to 3.9.4 ( #3988 )
...
Bumps [helm.sh/helm/v3](https://github.com/helm/helm ) from 3.8.0 to 3.9.4.
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.8.0...v3.9.4 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com>
2022-11-08 15:27:20 +01:00
dependabot[bot]
183f792674
chore(deps): bump github.com/hashicorp/vault from 1.9.3 to 1.9.9 ( #4045 )
...
Bumps [github.com/hashicorp/vault](https://github.com/hashicorp/vault ) from 1.9.3 to 1.9.9.
- [Release notes](https://github.com/hashicorp/vault/releases )
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/vault/compare/v1.9.3...v1.9.9 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com>
2022-10-14 08:11:56 +02:00
Anil Keshav
6b5bf5232a
fix(ssh auth) downgrade x/crypto to allow ssh auth with all git instances ( #3998 )
...
* fixing ssh by downgrading x/crypto
* comments on the why downgrade is needed
* comment update
Co-authored-by: anilkeshav27 <you@example.com>
2022-09-02 10:59:13 +02:00
Pavel Busko
14ce92b4fb
cnbBuild: create CycloneDX SBOM file ( #3959 )
...
Co-authored-by: Johannes Dillmann <j.dillmann@sap.com>
Co-authored-by: Ralf Pannemans <ralf.pannemans@sap.com>
2022-08-18 10:03:24 +02:00
Sven Merk
b3f37650a2
SBOM creation for Mend ( #3934 )
...
* Fix docs and format
* Assessment format added
* Added sample file
* Added parsing
* Added packageurl implementation
* Slight refinement
* Refactored assessment options
* Adapted sample file
* First attempt of ws sbom gen
* Reworked SBOM generation
* Fix test code
* Add assessment handling
* Update dependencies
* Added golden test
* Small fix
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com>
2022-08-09 13:56:01 +02:00
Alexey Matvievsky
da8cda6dbe
feat: http report creation for build steps ( #3888 )
...
* URL logging feature for execution step provided
2022-08-05 15:08:19 +04:00
Oliver Nocon
d640d72dc6
feat: improve vulnerability reporting via GitHub issues ( #3924 )
...
* feat: improve vulnerability reporting via GitHub issues
* feat: update reports
* chore: add tls cert links
* only write log on error
* chore: update formatting
* chore: update handling of direct dependencies
* chore: fix linting issue
* chore: minor updates
2022-08-02 08:26:26 +02:00
Mayur Belur Mohan
cdea4b7713
ApiProxyList Command ( #3794 )
...
* ApiProxyList Command
* CodeReview Fixes
* CodeReview Fixes
* CodeReview FIxes
* CodeReview Fixes
* CodeReview FIxes
* CodeReview Fixes
* fixing unit test
* doc fixes
* Update documentation/docs/steps/apiProxyList.md
Co-authored-by: Oliver Feldmann <oliver.feldmann@sap.com>
* CodeReview Fixes
* CodeReview Fixes
* CodeReview Fixes
* codereview fix
Co-authored-by: Oliver Feldmann <oliver.feldmann@sap.com>
2022-06-21 13:08:00 +02:00
Julian Schmitt
dd0aae6ded
Create azureBlobUpload ( #3766 )
...
* add Step azureBlobUpload
* add azure sdk and unit tests
* add Documentation
* fix Groovy Wrapper
* adopt the requested changes from awsS3Upload
* fix lint tests
* downgrade azure sdk to go 1.17
* multiple fixes e.g. use of temporary files for tests
* fix tests
* Update cmd/azureBlobUpload.go
Co-authored-by: Oliver Feldmann <oliver.feldmann@sap.com>
* Update cmd/azureBlobUpload.go
Co-authored-by: Oliver Feldmann <oliver.feldmann@sap.com>
* Update documentation/docs/steps/azureBlobUpload.md
Co-authored-by: Oliver Feldmann <oliver.feldmann@sap.com>
* Update documentation/docs/steps/azureBlobUpload.md
Co-authored-by: Oliver Feldmann <oliver.feldmann@sap.com>
* Update documentation/docs/steps/azureBlobUpload.md
Co-authored-by: Oliver Feldmann <oliver.feldmann@sap.com>
* Update documentation/docs/steps/azureBlobUpload.md
Co-authored-by: Oliver Feldmann <oliver.feldmann@sap.com>
* requested changes
* use latest version of azure sdk after update to go 1.18
* change staticcheck from 1.1.0 to 1.2.0
* try to fix lint test by pre-compiling go 1.18
* fix caching for lint test
* improve error handling by dividing runner
* improve error handling and add validation
* multiple naming fixes
* add new test for unmarshalling JSON-Structs
* Update cmd/azureBlobUpload_test.go
Co-authored-by: Oliver Feldmann <oliver.feldmann@sap.com>
* Update cmd/azureBlobUpload_test.go
Co-authored-by: Oliver Feldmann <oliver.feldmann@sap.com>
* Update cmd/azureBlobUpload_test.go
Co-authored-by: Oliver Feldmann <oliver.feldmann@sap.com>
* fix JSON unmarshall test
* Update documentation/docs/steps/azureBlobUpload.md
Co-authored-by: Oliver Feldmann <oliver.feldmann@sap.com>
* Update cmd/azureBlobUpload_test.go
Co-authored-by: Oliver Feldmann <oliver.feldmann@sap.com>
* Update cmd/azureBlobUpload.go
Co-authored-by: Oliver Feldmann <oliver.feldmann@sap.com>
* fix uploadFunc
Co-authored-by: Thorsten Duda <thorsten.duda@sap.com>
Co-authored-by: Oliver Feldmann <oliver.feldmann@sap.com>
2022-06-15 09:41:02 +02:00
Philipp Stehle
17ed9468cb
replace depreacted strings.Title function ( #3786 )
2022-05-20 18:50:03 +02:00
Thorsten Duda
7748e81b59
Update go version to 1.18 ( #3783 )
...
* Update go version to 1.18
* Update go version to 1.18
* Create awsS3Upload (#3737 )
* add Step awsS3Upload
* fix JSON Read
* fix groovy wrapper
* change credentials to secret text
* Change credentials type to token
* add cleanup for environment variables
* Add AwsS3UploadCommand to piper.go
* add documentation of awsS3Upload
* Fix JSON String Example in Documentation
* add the Upload of whole directories
* add Logging to awsS3Upload.go
* imporve Logging
* fix and improve unit tests
* fix non-existing-filepaths-Bug
* fix windows filepaths
* remove ... from logging
* change step description
* fix PR Tests
* remove redundant code
* try to run tests sequentially
* fix file.Close
* executed go mod tidy
* requested changes
* fix comments and awsCredentials
* Update documentation/docs/steps/awsS3Upload.md
Co-authored-by: Oliver Feldmann <oliver.feldmann@sap.com>
* use temporary files for unit tests
* executed go generate
Co-authored-by: ffeldmann <f.feldmann@sap.com>
Co-authored-by: Oliver Feldmann <oliver.feldmann@sap.com>
Co-authored-by: Thorsten Duda <thorsten.duda@sap.com>
* fix go.sum
* Fix project config reset when preset is set (#3782 )
Co-authored-by: Julian Schmitt <97178428+JulianPSchmitt@users.noreply.github.com>
Co-authored-by: ffeldmann <f.feldmann@sap.com>
Co-authored-by: Oliver Feldmann <oliver.feldmann@sap.com>
Co-authored-by: Adrien <99400874+hubadr@users.noreply.github.com>
2022-05-19 10:30:10 +02:00
Julian Schmitt
6714794066
Create awsS3Upload ( #3737 )
...
* add Step awsS3Upload
* fix JSON Read
* fix groovy wrapper
* change credentials to secret text
* Change credentials type to token
* add cleanup for environment variables
* Add AwsS3UploadCommand to piper.go
* add documentation of awsS3Upload
* Fix JSON String Example in Documentation
* add the Upload of whole directories
* add Logging to awsS3Upload.go
* imporve Logging
* fix and improve unit tests
* fix non-existing-filepaths-Bug
* fix windows filepaths
* remove ... from logging
* change step description
* fix PR Tests
* remove redundant code
* try to run tests sequentially
* fix file.Close
* executed go mod tidy
* requested changes
* fix comments and awsCredentials
* Update documentation/docs/steps/awsS3Upload.md
Co-authored-by: Oliver Feldmann <oliver.feldmann@sap.com>
* use temporary files for unit tests
* executed go generate
Co-authored-by: ffeldmann <f.feldmann@sap.com>
Co-authored-by: Oliver Feldmann <oliver.feldmann@sap.com>
Co-authored-by: Thorsten Duda <thorsten.duda@sap.com>
2022-05-18 10:37:54 +02:00
Christian Volk
22f6aa156f
feat(docker): use crane for pulling docker images ( #3652 )
2022-03-23 10:02:00 +01:00
Pavel Busko
e2de22f5ea
feat(kubernetesDeploy): use go templating for the deployTool: kubectl ( #3600 )
...
Co-authored-by: Johannes Dillmann <j.dillmann@sap.com>
2022-03-08 14:52:43 +01:00
Oliver Nocon
0998a80f07
chore: update to go 1.17 ( #3557 )
...
* chore: update to go 1.17
Co-authored-by: Ralf Pannemans <ralf.pannemans@sap.com>
* update workflows
Co-authored-by: Pavel Busko <pavel.busko@sap.com>
* fixed multipart upload tests
Co-authored-by: Johannes Dillmann <j.dillmann@sap.com>
* go fmt
Co-authored-by: Pavel Busko <pavel.busko@sap.com>
* Update to go 1.17
Co-authored-by: Ralf Pannemans <ralf.pannemans@sap.com>
* Update vault to v1.9.3
Co-authored-by: Pavel Busko <pavel.busko@sap.com>
Co-authored-by: Ralf Pannemans <ralf.pannemans@sap.com>
Co-authored-by: Pavel Busko <pavel.busko@sap.com>
Co-authored-by: Johannes Dillmann <j.dillmann@sap.com>
Co-authored-by: ffeldmann <f.feldmann@sap.com>
2022-03-07 17:15:36 +01:00
Ralf Pannemans
4b2f61589d
feat(cnbbuild) enable multi image build ( #3521 )
...
Co-authored-by: Ralf Pannemans <ralf.pannemans@sap.com>
Co-authored-by: Pavel Busko <pavel.busko@sap.com>
Co-authored-by: Sumit Kulhadia <sumit.kulhadia@sap.com>
2022-02-15 14:39:14 +01:00
xgoffin
2cebf370c9
feat(fortifyExecuteScan): added conversion to SARIF for FPR files ( #3485 )
...
* feat(FPRtoSARIF): boilerplate & comments
* Feat(Ingest): Build done, Vulnerabilities partway
* feat(Vulnerabilities): now entirely parsed
* feat(Ingestion): handle Description object
* feat(FprToSarif): integration in Piper step, full xml structure
* feat(fpr_to_sarif): base program. Need to replace names in messages
* feat(fpr_to_sarif): message substitution and custom definition integration
* fix(fpr_to_sarif): missing replacement in tools object
* fix(fortifyExecuteScan): unit tests
* fix(fpr_to_sarif): failing unit test
* Fix fortify folder creation for generating sarif
* deletion of unzip folder
* fix(fortifyExecuteScan): change logging to info
* feat(fpr_to_sarif): better unit test
* fix(fpr_to_sarif): pr tests failing
* feat(fpr_to_sarif): add specific properties to sarif
* feat(fpr_to_sarif): severity integration
* fix(fpr_to_sarif): unit test fixed
Co-authored-by: Sven Merk <33895725+nevskrem@users.noreply.github.com>
Co-authored-by: Sumeet PATIL <sumeet.patil@sap.com>
2022-02-08 14:10:40 +01:00
Christian Volk
880be73a4c
feat(golangBuild): support private modules ( #3471 )
...
* feat(golangBuild): support private module repositories
2022-01-31 10:45:40 +01:00
Siarhei Pazdniakou
cd243ee542
feat(gcs): allow upload to gcs from steps ( #3034 )
...
* Upload reports to Google Cloud Storage bucket
* Added tests. Made fixes
* Update step generation. GCS client was moved to GeneralConfig
* Code was refactored
* Fixed issues
* Fixed issues
* Code correction due to PR comments
* Improved gcs client and integration tests
* Integrated gcp config. Updated step metadata
* Fixed issues. Added tests
* Added cpe, vault, aliases resolving for reporting parameters
* Added tests
* Uncommented DeferExitHandler. Removed useless comments
* fixed cloning of config
* Added comments for exported functions. Removed unused mock
* minor fix
* Implemented setting of report name via paramRef
* some refactoring. Writing tests
* Update pkg/config/reporting.go
* Update cmd/sonarExecuteScan_generated.go
* Apply suggestions from code review
* Update pkg/config/reporting.go
* Update pkg/config/reporting.go
* fixed removing valut secret files
* Update pkg/config/reporting.go
* restore order
* restore order
* Apply suggestions from code review
* go generate
* fixed tests
* Update resources/metadata/sonarExecuteScan.yaml
* Update resources.go
* Fixed tests. Code was regenerated
* changed somewhere gcp to gcs. Fixed one test
* move gcsSubFolder to input parameters
* fixed removing valut secret files
* minor fix in integration tests
* fix integration tests
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com>
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com>
Co-authored-by: Sven Merk <33895725+nevskrem@users.noreply.github.com>
2021-12-15 15:07:47 +01:00
Pavel Busko
79f7ccd0f5
feat(cnbBuild): increased platform api compatibility ( #3330 )
...
Co-authored-by: Ralf Pannemans <ralf.pannemans@sap.com>
Co-authored-by: Benjamin Haegenlaeuer <benjamin.haegenlaeuer@sap.com>
2021-12-07 14:06:35 +01:00
Oliver Nocon
24d8584c3f
chore: update Vault dependency ( #3332 )
2021-12-06 12:54:42 +01:00
Philipp Stehle
0f3b48aaec
feat(cnbBuild): support for paketo bindings ( #3236 )
...
* [WIP] bindings support for cnbBuild step
Co-authored-by: Pavel Busko <pavel.busko@sap.com>
* add unit tests
Co-authored-by: Philipp Stehle <philipp.stehle@sap.com>
* switch to mapstruct for more meaningful errors
Co-authored-by: Philipp Stehle <philipp.stehle@sap.com>
* add integration test for bindings
Co-authored-by: Philipp Stehle <philipp.stehle@sap.com>
* Add documentation for cnbBuild.bindings
Co-authored-by: Philipp Stehle <philipp.stehle@sap.com>
* fixed unit tests
Co-authored-by: Pavel Busko <pavel.busko@sap.com>
* apply codeclimate suggestions
Co-authored-by: Philipp Stehle <philipp.stehle@sap.com>
* renamed field "secret" to "key"
Co-authored-by: Pavel Busko <pavel.busko@sap.com>
Co-authored-by: Pavel Busko <pavel.busko@sap.com>
2021-11-03 12:37:26 +01:00
Pavel Busko
6fc8a4be2d
updated go.mod dependencies ( #3167 )
...
Co-authored-by: Johannes Dillmann <j.dillmann@sap.com>
2021-10-13 10:39:45 +02:00
Pavel Busko
372cef04b4
feat(cnbBuild): added support for project.toml ( #3163 )
...
Co-authored-by: Sumit Kulhadia <sumit.kulhadia@sap.com>
Co-authored-by: Johannes Dillmann <j.dillmann@sap.com>
2021-10-11 11:10:21 +02:00
Siarhei Pazdniakou
46bafc40a3
Improve validation of configuration ( #3125 )
...
* Implemented validation for the option possibleValues
* Has been added the option mandatoryIf to config with validation
* Fixed issues found during code review
* improved golang template
* Fixed tests. Added validation for mandatoryIf option
* Fix typo
* Fixed tests
* Validation was refactored. Added options
* Added default value for parameters with possibleValues option
* Validation was moved after the configuration resolution
* Canceled some default values
Co-authored-by: Sven Merk <33895725+nevskrem@users.noreply.github.com>
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com>
2021-10-01 12:49:05 +02:00
Pavel Busko
cba94dcb35
Cnb build custom buildpacks ( #3090 )
...
* [WIP] cnbBuild custom buildpacks draft
Co-authored-by: Pavel Busko <pavel.busko@sap.com>
* Store custom buildpacks in the dedicated tmp folder
Co-authored-by: Ralf Pannemans <ralf.pannemans@sap.com>
* added test
Co-authored-by: Pavel Busko <pavel.busko@sap.com>
* updated documentation
Co-authored-by: Ralf Pannemans <ralf.pannemans@sap.com>
* use Files for toml files cleanup
Co-authored-by: Pavel Busko <pavel.busko@sap.com>
* Add missing function to the FileUtils interface
Co-authored-by: Ralf Pannemans <ralf.pannemans@sap.com>
Co-authored-by: Ralf Pannemans <ralf.pannemans@sap.com>
2021-09-14 16:14:50 +02:00
Siarhei Pazdniakou
d8d533b154
ADO - Vault Secret Rotation ( #3084 )
...
* Implemented vault secret rotation for ADO
* Added tests
* Fixed issues
2021-09-08 16:48:12 +02:00
Haegi
3f4b32f7ba
cnbBuild step MVP ( #3021 )
...
* Implement cnbBuild step
Co-authored-by: Benjamin Haegenlaeuer <benjamin.haegenlaeuer@sap.com>
* Add cnbBuild groovy test
Co-authored-by: Benjamin Haegenlaeuer <benjamin.haegenlaeuer@sap.com>
* Add basic documentation template
Co-authored-by: Philipp Stehle <philipp.stehle@sap.com>
* Support specifiying name, tag and registry
Co-authored-by: Pavel Busko <pbusko@users.noreply.github.com>
Co-authored-by: Johannes Dillmann <j.dillmann@sap.com>
Co-authored-by: Philipp Stehle <philipp.stehle@sap.com>
Co-authored-by: Pavel Busko <pbusko@users.noreply.github.com>
2021-08-18 12:10:55 +02:00
Siarhei Pazdniakou
54f2a0d471
Added go-based influxWriteData step ( #2890 )
...
* Added go-based influxWriteData step
* Wrote tests & fixed issues
* Fixed issues
* Created go-based step tests. Fixed issues
* Fixed issues
* Integration test was added
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com>
Co-authored-by: Sven Merk <33895725+nevskrem@users.noreply.github.com>
2021-06-30 11:18:49 +02:00
Oliver Nocon
bcb76eff06
fix(windows build): fix golang.org/x/sys ( #2887 )
...
* chore: release binaries for darwin and win
* fix(windows build): fix golang.org/x/sys
This is necessary doe to a dependency of github.com/hashicorp/vault to docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible\pkg\system\filesys_windows.go
This creates a build error.
Further information can be found here:
https://github.com/golang/go/issues/34610
* Update .github/workflows/upload-go-master.yml
* update go.sum
2021-06-10 16:50:17 +02:00
