1
0
Fork 0
mirror of https://github.com/cisagov/log4j-affected-db.git synced 2024-11-05 16:38:27 +00:00
Commit graph

1399 commits

Author SHA1 Message Date
Jeremy Frasier
a842abbfef
Insist that the cisagov devs are the owners of the .github directory
This additional clause must remain at the _end_ of the CODEOWNERS file
so that it cannot be overridden by a later clause.

We want to make it so that all the .github files including CODEOWNERS
are protected so only code owners (the dev team) can approve
modifications to them.

This will prevent configuration changes from breaking Actions and
other management-type functions that the files in this directory
control. By setting the .github files/folder to require code owner
approval for changes, workflow and management changes will require dev
team review and checking.

Resolves #56.
2020-11-03 12:46:39 -05:00
Nick M
e44762c82f
Merge pull request #55 from cisagov/migrate_prettier_hook
Change repo for the prettier pre-commit hook
2020-10-22 13:54:40 -04:00
Nicholas McDonnell
919460cb21
Change repo for the prettier pre-commit hook
Per https://github.com/prettier/prettier/issues/9459 and specifically
https://github.com/prettier/prettier/issues/9459#issuecomment-713223710
the prettier hook for pre-commit is being broken out into its own repo.
2020-10-22 13:42:10 -04:00
Nick M
4d88e06e99
Merge pull request #54 from cisagov/pre-commit_updates
Update pre-commit Hooks
2020-10-22 10:48:16 -04:00
Nick M
1928db67bc
Merge branch 'develop' into pre-commit_updates 2020-10-22 10:44:39 -04:00
Nick M
a9ef644774
Merge pull request #53 from cisagov/add-how-to-skeleton
Add link to how to set up a new repo with skeletons
2020-10-22 10:44:26 -04:00
Nicholas McDonnell
59eef4cc77
Run pre-commit autoupdate 2020-10-19 11:53:09 -04:00
Nicholas McDonnell
de409db3f7
Use local filename in README link 2020-10-19 11:52:09 -04:00
Nicholas McDonnell
b5ef97dd4b
Remove seed-isort-config pre-commit hook
As of isort >=5, which we use, the seed-isort-config hook has been deprecated,
and the repository archived. I have removed the hook and the configuration
options it updated as a result.
2020-10-19 11:49:41 -04:00
Hillary
57d927d7d1
Add line breaks for linting
Pre-commit is now installed properly.
2020-10-09 10:10:12 -04:00
Hillary
e14ecde029
Add link to how to set up a new repo with skeletons 2020-10-09 10:07:04 -04:00
Mark Feldhousen
0923631e27
Merge pull request #52 from cisagov/improvement/workflows
Workflow improvements: 🦁 set-env, and 🐯 python-3.9, and 🐻 dependabot, oh my!
2020-10-07 13:53:37 -04:00
Felddy
7389a1b0cf
Enable weekly dependabot scans of github-actions and pip 2020-10-07 12:43:54 -04:00
Felddy
c9c00f1d03
Replace deprecated set-env workflow syntax
See: 
https://github.blog/changelog/2020-10-01-github-actions-deprecating-set-env-and-add-path-commands/
2020-10-07 12:42:59 -04:00
Felddy
6a4164dfba
Bump build workflow python-version to 3.9 2020-10-07 12:41:47 -04:00
Nick M
15411447a6
Merge pull request #51 from cisagov/pre-commit_updates
Autoupdate pre-commit and Additional Maintenance
2020-09-04 10:06:54 -04:00
Nicholas McDonnell
d8f14e845b
Sort .gitignore while I'm here 2020-09-03 16:32:30 -04:00
Nicholas McDonnell
ae4aa123c8
Update lint job to resolve #49 2020-09-03 16:31:23 -04:00
Nicholas McDonnell
3e9441c837
Update CODEOWNERS to resolve #50 2020-09-03 16:29:38 -04:00
Nicholas McDonnell
332e5a7669
Run pre-commit autoupdate 2020-09-03 16:27:01 -04:00
Nick M
e0fbcdad8a
Merge pull request #48 from cisagov/improvement/switch_setup-python_and_cache_actions_to_v2
Update actions/cache and actions/setup-python to v2
2020-07-30 14:04:07 -04:00
Nicholas McDonnell
969efdd0bb
Adjust cache key name
Make the job name the first part of the cache key since
it is the only part that isn't variable.
2020-07-30 11:08:22 -04:00
Nicholas McDonnell
6ab69f4f51
Bump actions/setup-python to v2
Keep it up-to-date even though we are not currently
using features added in v2.
2020-07-30 02:21:04 -04:00
Nicholas McDonnell
d6fe79dce3
Update actions/cache to v2
Switch the workflow to use cachev2. This puts us up to
date and allows us to consolidate into one cache item.
2020-07-30 02:19:02 -04:00
Nick M
3634093132
Merge pull request #47 from cisagov/improvement/autoupdate_pre-commit
Autoupdates to pre-commit Hooks for 2020-07
2020-07-13 08:48:49 -04:00
Nicholas McDonnell
907b89a20b
Add the black profile to the isort configuration 2020-07-10 21:34:22 -04:00
Nicholas McDonnell
91279d3ac2
Perform a pre-commit autoupdate for 2020-07
Notable version changes:
- docker-pre-commit v2.0.0
  This release includes the addition of two new hooks: hadolint and
  hadolint-system. These allow for linting Dockerfiles with the hadolint
  Docker image or a system installation of hadolint respectively.
- isort 5.0.7
  This release takes us from isort 4 to isort 5. There are a multitude of
  changes with information available on the isort 5 release page at
  https://timothycrosley.github.io/isort/docs/major_releases/introducing_isort_5/
  The most notable feature for us is the addition of built-in profiles for
  isort to run under. These profiles provide settings for conforming to various
  popular styles, and black is one of the profiles.
2020-07-10 21:28:58 -04:00
Mark Feldhousen
174d55b782
Merge pull request #46 from cisagov/improvement/setup_env
setup-env: A tool to automate a development environment setup.
2020-06-22 17:44:02 -04:00
Felddy
db362b9125
Normalize quotes. 2020-06-22 17:37:34 -04:00
Felddy
31980ed4a8
Clean up usage syntax since we now have multiple options. 2020-06-22 17:18:19 -04:00
Felddy
996ae2677a
Add recommendation to install brew, instead of assuming it is available. 2020-06-22 17:13:51 -04:00
Felddy
466ef0cce5
Sort command line flag case statement. 2020-06-22 17:05:19 -04:00
Felddy
482a370679
Switch to a POSIX compliant command... command.
This is the way.

I learned something today.

https://unix.stackexchange.com/questions/85249/why-not-use-which-what-to-use-then
2020-06-22 17:02:03 -04:00
Felddy
c5e7edf46b
Add flag to install pre-commit hooks now. 2020-06-22 16:55:34 -04:00
Felddy
ae21af1084
Improve usage message. 2020-06-22 16:55:01 -04:00
Felddy
8a105ca040
Respect customs. 2020-06-22 16:50:42 -04:00
Felddy
5d1d134c88
Change to python3 to standardize how we call python. 2020-06-22 16:34:53 -04:00
Felddy
23ef29c8a3
Clarify comment with text from pyenv local --help 2020-06-22 16:30:46 -04:00
Felddy
3c2781c8cc
Correct syntax on fence.
Closes CVE-2020-3.14159
2020-06-22 15:25:59 -04:00
Felddy
c50094a8de
Fix typo. 2020-06-22 15:15:18 -04:00
Felddy
af06915b05
Add tool and docs to automate development environment setup. 2020-06-22 14:57:04 -04:00
Shane Frasier
6668e3b465
Merge pull request #45 from cisagov/improvement/add-wheel
Add setuptools and wheel as pip dependencies
2020-06-09 19:40:36 -04:00
Jeremy Frasier
7f8d430a30
Pull in requirements.txt from requirements-test.txt 2020-06-09 15:19:05 -04:00
Jeremy Frasier
87ea53022c
Add setuptools and wheel as pip dependencies
setuptools usually comes along with pip, but wheel does not.  Using
wheel where possible to build python extensions is more modern and
more security conscious than using setup.py.
2020-06-09 15:10:11 -04:00
Nick M
70f0cbd612
Merge pull request #44 from cisagov/improvements/pre-commit_autoupdate_2020-05
Update pre-commit Hook Versions
2020-05-14 11:33:00 -04:00
Nicholas McDonnell
64edcc22a7
Merge branch 'improvements/pre-commit_autoupdate_2020-05' of github.com:cisagov/skeleton-generic into improvements/pre-commit_autoupdate_2020-05 2020-05-13 21:36:47 -04:00
Nicholas McDonnell
f831ef827c
Add final statement to descriptionf or why terraform_validate is disabled.
Review noticed that there lacked a determination for what we were doing about
the problem with the terraform_validate hook. I described the problems but
failed to mention what our path forward would be. This commit rectifies that
oversight.
2020-05-13 21:34:58 -04:00
Nick M
4d4db071b8
Merge branch 'develop' into improvements/pre-commit_autoupdate_2020-05 2020-05-13 16:18:48 -04:00
Nicholas McDonnell
fe4d5eb72a
Disable the terraform_validate hook.
We have seen a number of issues related to this hook ever since it was
re-enabled. It will need to remain disabled until at least the 0.13 Terraform
release, and can only be re-enabled if all issues we have seen have been
resolved in how `terraform validate` operates.
2020-05-13 16:07:18 -04:00
Nicholas McDonnell
2399f24622
Remove legacy comment from the isort hook declaration.
This comment references the mirrors-isort repository that we are no longer
using.
2020-05-13 15:35:36 -04:00