Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PR update #262

Open
wants to merge 28 commits into
base: master
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
28 commits
Select commit Hold shift + click to select a range
2b891ac
Add datree-validation.yml
datreeio[bot] Dec 31, 2022
4ebb864
fix: Gemfile.lock to reduce vulnerabilities
snyk-bot Mar 22, 2023
e11d468
fix: Gemfile & Gemfile.lock to reduce vulnerabilities
snyk-bot Apr 4, 2023
15f4ca3
fix: Gemfile & Gemfile.lock to reduce vulnerabilities
snyk-bot Apr 7, 2023
78856ba
Merge pull request #7 from Woodpile37/snyk-fix-d91f5de4e09210c7f1a9c4…
Woodpile37 Apr 13, 2023
311104a
fix: Gemfile.lock to reduce vulnerabilities
snyk-bot Apr 13, 2023
e0f4488
Merge branch 'master' into snyk-fix-bd79548a2d4619465f2012637da92881
Woodpile37 Apr 13, 2023
f47cdb8
Merge pull request #6 from Woodpile37/snyk-fix-bd79548a2d4619465f2012…
Woodpile37 Apr 13, 2023
eb9f46a
fix: Dockerfile to reduce vulnerabilities
snyk-bot Aug 17, 2023
f7eeeb1
Merge pull request #16 from Woodpile37/snyk-fix-4cd1817e3ab06516588e4…
Woodpile37 Aug 17, 2023
8cfb2ae
Merge pull request #8 from Woodpile37/snyk-fix-8a3eb44936651b0954ab80…
Woodpile37 Aug 17, 2023
983dfdb
Merge branch 'master' into snyk-fix-e9b1cf27e1238a4e82b59ff74cd6c542
Woodpile37 Aug 17, 2023
9197b6a
Merge pull request #5 from Woodpile37/snyk-fix-e9b1cf27e1238a4e82b59f…
Woodpile37 Aug 17, 2023
b5fa4b6
Merge pull request #1 from Woodpile37/datree-yaml-validation-2b891ace…
Woodpile37 Aug 17, 2023
bc099a7
Create SECURITY.md
Woodpile37 Aug 17, 2023
ade1705
Merge branch 'travis-ci:master' into master
Woodpile37 Aug 17, 2023
c90c9cf
fix: Gemfile to reduce vulnerabilities
snyk-bot Aug 17, 2023
cea108c
fix: Dockerfile to reduce vulnerabilities
snyk-bot Aug 17, 2023
eecf160
Merge pull request #18 from Woodpile37/snyk-fix-2fc3e54db26855e10f9de…
Woodpile37 Aug 17, 2023
e18a142
Merge pull request #17 from Woodpile37/snyk-fix-8c5538d59b72dd1e18019…
Woodpile37 Aug 17, 2023
5843907
fix: Gemfile to reduce vulnerabilities
snyk-bot Aug 22, 2023
02c913c
Merge pull request #19 from Woodpile37/snyk-fix-021fe6c389bb4f4fae739…
Woodpile37 Aug 22, 2023
2a19537
fix: Gemfile to reduce vulnerabilities
snyk-bot Aug 24, 2023
eef0b04
Merge pull request #20 from Woodpile37/snyk-fix-77f856db87e069f212e89…
Woodpile37 Aug 24, 2023
c37bab5
fix: Gemfile to reduce vulnerabilities
snyk-bot Sep 13, 2023
f857574
Merge pull request #21 from Woodpile37/snyk-fix-922afcc95084b4baf4942…
Woodpile37 Sep 13, 2023
1f96007
fix: Gemfile to reduce vulnerabilities
snyk-bot Oct 6, 2023
089741e
Merge pull request #22 from Woodpile37/snyk-fix-e15c8ca4bc17d082c3a09…
Woodpile37 Oct 6, 2023
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
53 changes: 53 additions & 0 deletions .github/workflows/datree-validation.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,53 @@
# |=========================== Datree Policy Check ===================================|
# | This workflow will verify that all committed config files in the PR are valid. |
# | If one of the config files is happened to be a K8s config file (manifest), |
# | It will also automatically be tested for schema validation and misconfigurations. |
# | For more info visit: https://github.com/marketplace/datree |
# |===================================================================================|

name: Datree Workflow

on:
pull_request:
types: [opened, edited, synchronize, reopened]

jobs:
configs-validation:
runs-on: ubuntu-latest
env:
DATREE_TOKEN: ${{ secrets.DATREE_TOKEN }}
steps:
- name: Checkout repository
uses: actions/checkout@v3
with:
fetch-depth: 0

- name: Get changed files
id: changed-files
uses: tj-actions/changed-files@v19
with:
files: |
*.yaml
*.yml
- name: List all changed files
run: echo ${{ steps.changed-files.outputs.all_changed_files }}

- name: Install Datree's CLI
if: steps.changed-files.outputs.any_changed == 'true'
run: curl https://get.datree.io | /bin/bash -s

# |=========================== Datree Policy Check ===================================|
# | Prevent Kubernetes misconfigurations from reaching production! |
# | Datree is a CLI tool to ensure K8s configs follow stability & security |
# | best practices as well as your organization’s policies. |
# | For more info visit: https://github.com/datreeio/datree |
# |===================================================================================|

- name: Datree validate config files
if: steps.changed-files.outputs.any_changed == 'true'
uses: datreeio/action-datree@main # For more info about this Actions visit 👉 https://github.com/datreeio/action-datree
with:
path: ${{ steps.changed-files.outputs.all_changed_files }}
cliArguments: --only-k8s-files
isHelmChart: false
isKustomization: false
2 changes: 1 addition & 1 deletion Dockerfile
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM ruby:2.5.8
FROM ruby:3.1.3

LABEL maintainer Travis CI GmbH <[email protected]>

Expand Down
16 changes: 8 additions & 8 deletions Gemfile
Original file line number Diff line number Diff line change
Expand Up @@ -8,27 +8,27 @@ def gh(slug)
"https://github.com/#{slug}.git"
end

gem 'activesupport'
gem 'activesupport', '>= 7.0.7.1'
gem 'aws-sdk'
gem 'bunny'
gem 'coder'
gem 'concurrent-ruby', require: 'concurrent'
gem 'connection_pool'
gem 'dalli'
gem 'dalli', '>= 3.2.3'
gem 'jemalloc', git: gh('joshk/jemalloc-rb')
gem 'jwt'
gem 'libhoney'
gem 'metriks', git: gh('travis-ci/metriks')
gem 'metriks-librato_metrics', git: gh('travis-ci/metriks-librato_metrics')
gem 'multi_json'
gem 'opencensus'
gem 'opencensus-stackdriver'
gem 'opencensus-stackdriver', '>= 0.3.0'
gem 'pg'
gem 'pry'
gem 'puma'
gem 'puma', '>= 6.3.1'
gem 'pusher'
gem 'rack-ssl'
gem 'rack-test', group: :test
gem 'rack-test', '>= 2.0.0', group: :test
gem 'rake'
gem 'rbtrace'
gem 'redis-namespace'
Expand All @@ -37,10 +37,10 @@ gem 'rspec', group: :test
gem 'rubocop', require: false, group: :test
gem 'sentry-raven'
gem 'sequel'
gem 'sidekiq'
gem 'sidekiq', '>= 7.1.3'
gem 'simplecov', require: false, group: :test
gem 'sinatra'
gem 'sinatra-contrib'
gem 'sinatra', '>= 2.2.3'
gem 'sinatra-contrib', '>= 3.0.6'
gem 'sinatra-param'
gem 'stackprof'
gem 'travis-config'
Expand Down
Loading