Raghav Kaul
28337f13b1
🌱 maintainer annotations: improve annotation file validation ( #4162 )
...
* validate check names against full list
Signed-off-by: Raghav Kaul <raghavkaul+github@google.com>
* tests: close file
Signed-off-by: Raghav Kaul <raghavkaul+github@google.com>
* update
Signed-off-by: Raghav Kaul <raghavkaul+github@google.com>
* make private
Signed-off-by: Raghav Kaul <raghavkaul+github@google.com>
* Restructure imports
Signed-off-by: Raghav Kaul <raghavkaul+github@google.com>
* update
Signed-off-by: Raghav Kaul <raghavkaul+github@google.com>
---------
Signed-off-by: Raghav Kaul <raghavkaul+github@google.com>
2024-07-02 15:40:34 +00:00
Spencer Schrock
0b9dfb656f
⚠️ Replace v4 module references with v5 ( #4027 )
...
Signed-off-by: Spencer Schrock <sschrock@google.com>
2024-04-12 14:51:50 -07:00
Spencer Schrock
b577d79c96
⚠️ Replace Positive and Negative outcomes with True and False ( #4017 )
...
* rename positive to true
Signed-off-by: Spencer Schrock <sschrock@google.com>
* rename negative to false
Signed-off-by: Spencer Schrock <sschrock@google.com>
---------
Signed-off-by: Spencer Schrock <sschrock@google.com>
2024-04-08 15:36:11 -07:00
Spencer Schrock
b3ad602a59
🌱 Add probe registration mechanism ( #3876 )
...
* add basic probe registration function
Signed-off-by: Spencer Schrock <sschrock@google.com>
* ignore probes which call init to register the probe
Signed-off-by: Spencer Schrock <sschrock@google.com>
* redefine probeimpl to avoid circular imports
Signed-off-by: Spencer Schrock <sschrock@google.com>
* register all probes
Signed-off-by: Spencer Schrock <sschrock@google.com>
* experiment with a probe struct
Signed-off-by: Spencer Schrock <sschrock@google.com>
* make check name constants
Signed-off-by: Spencer Schrock <sschrock@google.com>
* convert branch protection probes
Signed-off-by: Spencer Schrock <sschrock@google.com>
* convert binary artifact probes
Signed-off-by: Spencer Schrock <sschrock@google.com>
* convert cii probe
Signed-off-by: Spencer Schrock <sschrock@google.com>
* convert ci test probe
Signed-off-by: Spencer Schrock <sschrock@google.com>
* convert code review probes
Signed-off-by: Spencer Schrock <sschrock@google.com>
* convert contributor probe
Signed-off-by: Spencer Schrock <sschrock@google.com>
* convert dangerous workflow probe
Signed-off-by: Spencer Schrock <sschrock@google.com>
* convert dep update tool probes
Signed-off-by: Spencer Schrock <sschrock@google.com>
* convert fuzzing probes
Signed-off-by: Spencer Schrock <sschrock@google.com>
* convert license probes
Signed-off-by: Spencer Schrock <sschrock@google.com>
* convert maintained probes
Signed-off-by: Spencer Schrock <sschrock@google.com>
* convert packaging probe
Signed-off-by: Spencer Schrock <sschrock@google.com>
* convert sast probes
Signed-off-by: Spencer Schrock <sschrock@google.com>
* convert security policy probes
Signed-off-by: Spencer Schrock <sschrock@google.com>
* convert signed releases probes
Signed-off-by: Spencer Schrock <sschrock@google.com>
* convert vuln probe
Signed-off-by: Spencer Schrock <sschrock@google.com>
* try using probe registration data
Signed-off-by: Spencer Schrock <sschrock@google.com>
* blank import unused probe
Signed-off-by: Spencer Schrock <sschrock@google.com>
* add uncategorized group
Signed-off-by: Spencer Schrock <sschrock@google.com>
* ensure All list is up-to-date
Signed-off-by: Spencer Schrock <sschrock@google.com>
* add reason behind uncategorized group
Signed-off-by: Spencer Schrock <sschrock@google.com>
* fix linter yaml parse error
Signed-off-by: Spencer Schrock <sschrock@google.com>
* fix linter
Signed-off-by: Spencer Schrock <sschrock@google.com>
* add webhook data
Signed-off-by: Spencer Schrock <sschrock@google.com>
* convert probe registration to Must pattern
Signed-off-by: Spencer Schrock <sschrock@google.com>
* add registration for new probes
Signed-off-by: Spencer Schrock <sschrock@google.com>
* add missing license header
Signed-off-by: Spencer Schrock <sschrock@google.com>
* revert changing wrapcheck linter config
Signed-off-by: Spencer Schrock <sschrock@google.com>
* use error func which doesnt need wrapped
Signed-off-by: Spencer Schrock <sschrock@google.com>
* add test for probe registration
Signed-off-by: Spencer Schrock <sschrock@google.com>
* restore trailing newline
Signed-off-by: Spencer Schrock <sschrock@google.com>
* order probe category list
Signed-off-by: Spencer Schrock <sschrock@google.com>
---------
Signed-off-by: Spencer Schrock <sschrock@google.com>
2024-03-19 13:10:11 -07:00
AdamKorcz
ec36916c10
🌱 convert Webhook check to probes ( #3522 )
...
* 🌱 convert Webhook check to probes
Signed-off-by: AdamKorcz <adam@adalogics.com>
* Add test + nits
Signed-off-by: AdamKorcz <adam@adalogics.com>
* replace probe with OutcomeNotApplicable
Signed-off-by: AdamKorcz <adam@adalogics.com>
* return one finding per webhook
Signed-off-by: Adam Korczynski <adam@adalogics.com>
* change wording in def.yml
Signed-off-by: Adam Korczynski <adam@adalogics.com>
* change wording in def.yml and checks.md
Signed-off-by: Adam Korczynski <adam@adalogics.com>
* remove unused struct in test
Signed-off-by: Adam Korczynski <adam@adalogics.com>
* align checks.md with checks.yaml
Signed-off-by: Adam Korczynski <adam@adalogics.com>
* bring back experimental for webhooks
Signed-off-by: Adam Korczynski <adam@adalogics.com>
* change 'token' to 'secret' in probe
Signed-off-by: Adam Korczynski <adam@adalogics.com>
* use checker.MinResultScore instead of 0
Signed-off-by: Adam Korczynski <adam@adalogics.com>
* Change test name
Signed-off-by: Adam Korczynski <adam@adalogics.com>
* use checker.MinResultScore instead of 0
Signed-off-by: Adam Korczynski <adam@adalogics.com>
* fix typo
Signed-off-by: Adam Korczynski <adam@adalogics.com>
* Use checker.MaxResultScore instead of 10
Signed-off-by: Adam Korczynski <adam@adalogics.com>
* rename probe
Signed-off-by: Adam Korczynski <adam@adalogics.com>
* remove the 'totalWebhooks' value from findings
Signed-off-by: Adam Korczynski <adam@adalogics.com>
---------
Signed-off-by: AdamKorcz <adam@adalogics.com>
Signed-off-by: Adam Korczynski <adam@adalogics.com>
2023-12-05 18:59:42 +00:00
