Vyacheslav Starostin
a1908a67e0
telemetry: extend custom data ( #4836 )
2024-02-20 23:34:25 +06:00
Pavel Busko
38fa25795a
fix(detectExecuteScan): sanitize container image name before saving ( #4834 )
...
* fix(detectExecuteScan): sanitize container image name before saving
Co-authored-by: Philipp Stehle <philipp.stehle@sap.com>
* mock docker client during unit tests
Co-authored-by: Pavel Busko <pavel.busko@sap.com>
Co-authored-by: Philipp Stehle <philipp.stehle@sap.com>
---------
Co-authored-by: Philipp Stehle <philipp.stehle@sap.com>
2024-02-20 12:56:37 +01:00
Vyacheslav Starostin
b644bf7e15
Use Pendo as analytics tool ( #4828 )
...
* Try pendo
* Try pendo
* Fix typo
* Optimize data struct
* Adjust kaniko and kubernetes to try pendo
* Include golangBuild
* Update generator helper
* go generate
* Delete token param from some steps && go generate
* Add checking on ExportPrefix
* Update telemetry struct
* Try pipelineID for artifactPrepVersion
* Try pipelineID as a CPE value
* Update
* Try CF
* Read pipelineID from CPE
* Enable telemetry
* Fix name
* Do not show token in header
* Read pipelineID from CPE
* Clean up
* Clean up
* Update template
* go generate
* Update template
* Try Cribl
* HTTPS
* Update
* Clean-up
* Fix tests
* Update
2024-02-20 17:17:20 +06:00
Googlom
150560db9e
feature(httpReadFile): Add headers to download from github release assets ( #4826 )
2024-02-20 09:35:41 +01:00
Pavel Busko
bdc49e7be6
fix(detectExecuteScan): do not read imageNameTags from CPE directly ( #4833 )
...
Co-authored-by: Philipp Stehle <philipp.stehle@sap.com>
2024-02-19 14:01:41 +01:00
Ralf Pannemans
49b8080461
feat(detectExecuteScan): Also scan images that are in the CPE ( #4678 )
...
feat(detectExecuteScan): Also scan images that are in the cpe
Signed-off-by: Ralf Pannemans <ralf.pannemans@sap.com>
Signed-off-by: Johannes Dillmann <j.dillmann@sap.com>
Signed-off-by: Pavel Busko <pavel.busko@sap.com>
Co-authored-by: Johannes Dillmann <j.dillmann@sap.com>
Co-authored-by: Pavel Busko <pavel.busko@sap.com>
2024-02-12 08:56:40 +01:00
Daniel Mieg
f51fbc3e4e
Only print logs if error occurred ( #4823 )
2024-02-09 10:20:27 +01:00
Vyacheslav Starostin
4e3fa38dd3
Clean-up checkIfStepActive ( #4814 )
...
* Clean-up checkIfStepActive
* Mark --useV1 deprecated
* Clean up tests
* Update test
* Add warning message
* Update warning msg
2024-02-08 15:43:26 +06:00
Anil Keshav
c2343b19b8
including conditions when starting side cars docker containers ( #4815 )
...
* including conditions for side cars and also default context
* docu typo error
2024-02-06 14:54:49 +01:00
Googlom
b4863fee45
fix(gitopsUpdateDeployment): take into account branch name when clonning ( #4811 )
...
* use branch when clonning a repo
* fix unit test mocks
2024-02-06 13:33:30 +05:00
Daria Kuznetsova
668b3711a3
fix(codeqlExecuteScan): improved logging ( #4817 )
2024-02-05 15:54:49 +05:30
renovate[bot]
b9ea3e9312
chore(deps): update actions/stale action to v9 ( #4753 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-05 08:28:33 +01:00
Daria Kuznetsova
1520777d5d
fix(codeqlExecuteScan): set default value for ram to 4000 ( #4803 )
...
Co-authored-by: sumeet patil <sumeet.patil@sap.com>
2024-02-05 10:55:55 +05:30
Daniel Mieg
7575539c5a
top ( #4787 )
2024-02-02 19:07:31 +00:00
renovate[bot]
10b518fd70
chore(deps): update dependency org.jacoco:jacoco-maven-plugin to v0.8.11 ( #4792 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-02 09:41:04 +01:00
Philipp Stehle
28fa2608dd
cnbBuild: allow expansion of buildEnvVars ( #4802 )
...
* cnbBuild: allow expansion of `buildEnvVars`
* Update resources/metadata/cnbBuild.yaml
Co-authored-by: Ralf Pannemans <ralf.pannemans@googlemail.com>
---------
Co-authored-by: Ralf Pannemans <ralf.pannemans@googlemail.com>
2024-02-01 13:53:13 +01:00
Akramdzhon Azamov
689c79e388
Fixed issue with empty project tokens after scanning ( #4808 )
...
* Fixed issue with empty project tokens after scanning
2024-01-29 16:15:32 +01:00
Googlom
ab62827a3e
Update buildpacks/lifecycle dependency ( #4801 )
...
* update lib version and fix code
* remove outdated replace statement
* update helm.sh/helm/v3
---------
Co-authored-by: Gulom Alimov <gulomjon.alimov@sap.com>
2024-01-29 10:45:25 +05:00
Oliver Nocon
cd2fb914fa
feat: allow linting failures ( #4355 )
...
Co-authored-by: Anil Keshav <anil.keshav@sap.com>
2024-01-25 11:44:24 +01:00
Daria Kuznetsova
4be7b99f95
fix(codeqlExecuteScan): check for compliance for Audit All ( #4796 )
...
Co-authored-by: sumeet patil <sumeet.patil@sap.com>
2024-01-25 11:05:29 +05:30
Googlom
33b8c489f9
fix dependencies with security issues ( #4790 )
...
* remove vault interaction from unit tests
* go mod tidy
* update some dependency minor versions
* update github.com/getsentry/sentry-go
* fix vault dependency
* update google.golang.org/api and cloud.google.com/go/storage
* fix unit test
---------
Co-authored-by: Gulom Alimov <gulomjon.alimov@sap.com>
2024-01-24 15:19:23 +05:00
ffeldmann
d0e205d018
chore: Disables webanalytics telemetry reporting by default ( #4788 )
...
* Disables telemetry reporting by default
* Update cmd/piper.go
2024-01-22 14:12:44 +01:00
Googlom
5d100ef79b
update dependencies from renovate bot
...
Co-authored-by: Gulom Alimov <gulomjon.alimov@sap.com>
2024-01-22 11:54:05 +01:00
renovate[bot]
f504beaa69
fix(deps): update github.com/motemen/go-nuts digest to 2658d01 ( #4500 )
...
* fix(deps): update github.com/motemen/go-nuts digest to 2658d01
* go mod tidy
* go mod tidy (merge conflict)
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Gulom Alimov <gulomjon.alimov@sap.com>
2024-01-22 15:31:56 +05:00
renovate[bot]
b022f6d471
fix(deps): update module github.com/getsentry/sentry-go to v0.26.0 ( #4738 )
...
* fix(deps): update module github.com/getsentry/sentry-go to v0.26.0
* go mod tidy
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Gulom Alimov <gulomjon.alimov@sap.com>
2024-01-22 15:09:34 +05:00
renovate[bot]
0764534edb
fix(deps): update module github.com/influxdata/influxdb-client-go/v2 to v2.13.0 ( #4737 )
...
* fix(deps): update module github.com/influxdata/influxdb-client-go/v2 to v2.13.0
* go mod tidy
* add new APIClient method to mock
* go mod tdiy
* go mod tidy again
* remove mocks
* update mockery and regenerate
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: jliempt <>
Co-authored-by: Gulom Alimov <gulomjon.alimov@sap.com>
Co-authored-by: Googlom <36107508+Googlom@users.noreply.github.com>
2024-01-22 14:54:34 +05:00
Googlom
0117942d25
update golang to 1.20 ( #4783 )
...
* update golang to 1.20
* update version in another places
* fix failing unit tests and lint
---------
Co-authored-by: Gulom Alimov <gulomjon.alimov@sap.com>
2024-01-22 10:18:32 +05:00
Daniel Mieg
d115858ead
Fix initial request ( #4785 )
2024-01-18 20:28:24 +01:00
Adrien LESUR
61564ea229
Run helm dependency before helm lint ( #4777 )
...
* Update helmExecute.go
* Update helmExecute_test.go
* Try fix format issue
2024-01-18 13:06:42 +06:00
Daria Kuznetsova
6920cad511
feat(codeqlExecuteScan): adding data to InfluxDB ( #4780 )
...
* added influxdb to params, added log for testing
* changed fields for codeql influx db
* added setting codeql findings to influx
* refactored
* fixed typo
* added tests
2024-01-17 11:38:16 +03:00
Dmitrii Pavlukhin
808b21fa79
Add maven native-like build workaround for detect ( #4712 )
...
* added-native-like-build
* pom-path-uncommented
* Run install only for maven
* Added log
* debug
* Print config params
* Added pipeline env
* Added parameter to specify path to pom.xml
* Returned condition
* Added logging of config in verbose mode
---------
Co-authored-by: Andrei Kireev <a-kireev1989@mail.ru>
Co-authored-by: Andrei Kireev <andrei.kireev@sap.com>
2024-01-15 22:50:22 +01:00
Googlom
9074822e57
allow reconfiguration of provider ( #4776 )
...
Co-authored-by: Gulom Alimov <gulomjon.alimov@sap.com>
2024-01-15 17:51:32 +05:00
Christopher Fenner
70b860f47f
feat: remove SAP web analytics reporting ( #4773 )
...
* improve vault logging
* remove swa calls
* Revert "improve vault logging"
This reverts commit 8335bbf365c63a9c0215059ededdf6758345491e.
2024-01-15 13:17:53 +01:00
Dmitrii Pavlukhin
86a59eb412
Mend fix for the config path calculation ( #4766 )
...
* fix-for-the-scan-path-in-custom-pipelines
* amended-scan-path-logic
* minor-changes
* returned-old-way-of handling-config
* returned-old-way
* removed-comments
2024-01-15 10:30:19 +03:00
Marco Rosa
6ac8fd155b
chore: Update CODEOWNERS for credentialdiggerScan step ( #4348 )
...
* Update CODEOWNERS for credentialdiggerScan step
* Update .github/CODEOWNERS
* Update .github/CODEOWNERS
---------
Co-authored-by: Ashly Mathew <ashlymathew93@gmail.com>
Co-authored-by: Ashly Mathew <ashly.mathew@sap.com>
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com>
2024-01-10 14:01:17 +01:00
renovate[bot]
01b0f44da3
chore(deps): update actions/setup-go action to v5 ( #4751 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com>
2024-01-10 11:53:11 +01:00
renovate[bot]
92791bed3a
chore(deps): update actions/setup-python action to v5 ( #4752 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-10 11:52:10 +01:00
Jk1484
5b68fc6095
throw a warning if value of a config is of the wrong type ( #4700 )
2024-01-10 15:02:11 +05:00
Googlom
2b2c441949
fix: handle legacy stage name differences ( #4733 )
...
* add name difference handler function
* add conditions for setting keys
---------
Co-authored-by: Gulom Alimov <gulomjon.alimov@sap.com>
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com>
2024-01-10 10:39:29 +01:00
Dmitrii Pavlukhin
89e1e01ae9
Temporary Fix docker images timeout issue ( #4762 )
...
* returned-the-old-way-of-handling-images
* introduced-additional-parameter
* amended-the-description
* amended-condition
2024-01-09 15:22:54 +03:00
Googlom
ac5cf17317
refactor(orchestrator): Use singleton in orchestrator package and rename methods ( #4639 )
...
* rename interface, types and methods.
some type changes and refactor
* update dependent methods and variables
* fix unit tests
* a bit more refactor and fix
* concurrent safe singleton
* return old Options struct
* refactor creating config provider and fix nil pointer derefernce
* fix unit test and linter errors
* introduce resetting config provider (for unit tests)
* fix annoying error message when config provider is not configured
---------
Co-authored-by: Gulom Alimov <gulomjon.alimov@sap.com>
Co-authored-by: Muhammadali Nazarov <muhammadalinazarov@gmail.com>
2024-01-09 16:01:15 +05:00
Adam Horacek
a5ea24dfb0
feat(configs): vaultCredentialEnvPrefix to support several prefixes ( #4745 )
...
* feat(configs): vaultCredentialEnvPrefix to support several prefixes
* minor refactoring
* docs
---------
Co-authored-by: Muhammadali Nazarov <muhammadalinazarov@gmail.com>
2024-01-09 13:07:53 +05:00
Dmitrii Pavlukhin
32657c44d7
changed-save-name ( #4759 )
2024-01-08 15:53:15 +03:00
Dmitrii Pavlukhin
f5f72bcc7c
Remove useDetect7 option ( #4717 )
...
* removed-detect7-option
* linting-fix
* removed-comment
2024-01-08 13:21:44 +03:00
Dmitrii Pavlukhin
6cc6a4e80a
Feature - whitesourceExecuteScan - adding ability to scan multiple docker images ( #4755 )
...
* added-multiple-images-scan-logic
* amended-description
* added-reference-to-common-pipeline-env
2024-01-05 18:23:55 +03:00
Vyacheslav Starostin
0688a05847
fix(imagePushToRegistry): image tag shouldn't contain plus sign ( #4756 )
2024-01-05 16:41:30 +06:00
renovate[bot]
014e8f073c
fix(deps): update module golang.org/x/crypto to v0.17.0 [security] ( #4728 )
...
* fix(deps): update module golang.org/x/crypto to v0.17.0 [security]
* go mod tidy
* undo accidental change
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: jliempt <>
2023-12-27 09:21:44 +01:00
tiloKo
c7ac43595f
Update targetVector.go ( #4736 )
...
missing space
2023-12-22 13:15:35 +01:00
Daria Kuznetsova
439a7ad82e
fix(codeqlExecuteScan): init empty GitHub repo before mirroring code ( #4714 )
...
* added initializing empty repo
* updated go.mod
* updated go.mod
* updated go.sum
* updated go.mod
* updated go.mod
* updated go.mod
---------
Co-authored-by: sumeet patil <sumeet.patil@sap.com>
2023-12-21 11:20:44 +03:00
Daniel Mieg
dbc3d41b37
SAP_COM_0948 ( #4715 )
...
* SAP_COM_0948 clone, pull & checkout
* Fix log output
* Enable compatibility for old tests
* Fix tests
* Add tests for SAP_COM_0948
* Change message
* Add tags for test
* add retry for error code 501
---------
Co-authored-by: tiloKo <70266685+tiloKo@users.noreply.github.com>
2023-12-19 15:16:48 +01:00
