Merge develop into master for release
#3344
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
When an action will be executed in debug mode (e.g. via GitHub UI) the secret `ACTIONS_STEP_DEBUG` will be set to true (empty if not enabled). This typically will allow to detect if a run is in debug mode. Because a GitHub action can not automatically read secrets the `runner.debug` variable needs to be used to determine if debug mode is enabled. When using this as default for the debug input of the action the debug will automatically be forwarded to sechub. Overwriting is always possible for the endusers because it is only the default setting of this action.
Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3. - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) --- updated-dependencies: - dependency-name: braces dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps [ws](https://github.com/websockets/ws) from 8.16.0 to 8.17.1. - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.16.0...8.17.1) --- updated-dependencies: - dependency-name: ws dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]>
- basic structure and first version of config model - validation section - categorization section - unit tests and spring boot tests - README with documentation
…ties #3276 - extend workaround classes with te ability to resolve secret validation wrapper custom severities - add necessary changes to SarifV1JSONImporter and added test cases with test report files
2 - After release: Merge master back into develop [auto-generated]
Co-authored-by: Laura <[email protected]>
…build-pds-prepare Added build and release steps for pds prepare
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 6.0.5 to 6.1.0. - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](peter-evans/create-pull-request@6d6857d...c5a7806) --- updated-dependencies: - dependency-name: peter-evans/create-pull-request dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
…re-dockerfile Fixed incorrect naming of wrapper
…dockerfile Corrected prepare wrapper version
- Create client and models from sechub-openapi-java in sechub-openapi-java-client - Remove gradle build stage and add remaining gradle submodules to project build - Fix error in build-versioning.gradle where file path was not resolved correctly
- #3307 fixed - tests added
Bumps [gradle/actions](https://github.com/gradle/actions) from 3.4.2 to 3.5.0. - [Release notes](https://github.com/gradle/actions/releases) - [Commits](gradle/actions@dbbdc27...d9c87d4) --- updated-dependencies: - dependency-name: gradle/actions dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.0.1 to 5.0.2. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@cdcb360...0a12ed9) --- updated-dependencies: - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4.0.0 to 4.0.3. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8f152de...1e60f62) --- updated-dependencies: - dependency-name: actions/setup-node dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
…loadfiles-when-remote cleanup empty files when remote-data-section #3307
…echub-website/braces-3.0.3 Bump braces from 3.0.2 to 3.0.3 in /sechub-website
…echub-website/ws-8.17.1 Bump ws from 8.16.0 to 8.17.1 in /sechub-website
…/peter-evans/create-pull-request-6.1.0 Bump peter-evans/create-pull-request from 6.0.5 to 6.1.0
…/gradle/actions-3.5.0 Bump gradle/actions from 3.4.2 to 3.5.0
- pds-iac - pds-loc - pds-multi - pds-owaspzap
- pds-pmd - pds-scancode - pds-prepare
- also eliminated double definition of XRAY_WRAPPER_VERSION
- pds-xray
- no more sensible data in cmdline - successfully built & tested
…s-extend-helm-charts Misc fixes for pds-solutions #3318
…s-eliminate-multiply-defined-params pds-solutions: eliminate multiply defined params #3329
- rename module to better fitting name service - rename tests - minor changes and typo fixes
…rst-version-of-secret-validator-application Feature 3141 implement first version of secret validator application
* SecHub - described concept of data encryption #3250 - Introduced sechub-encryption #3273 + update bouncy castle version #3275 - encryption implementation are now inside own gradle sub module "sechub-encryption" - refacotred sechub encryption library #3274 - implemented data encryption inside SecHub #3250 - restricted access and storage, avoid using configuration when not absolut necessary - created dedicated job message which contains unencrypted configuration at runtime. Only one message uses this one -> clear not accidently used on another code location - created migration scripts, seperated pool id generation for h2 and postgres because of binary type. Also postgres will migrate old data automatically to NoneCipher variant (means no real encryption, but admin will be able to rotate keys...) - wrote tests - introduced new usecases - new REST APIs introduced - added integration test for encryption rotation - added developer admin ui actions - auto cleanup does also auto clean old unused encryption pool data - Scheduler now only executes for accepted encryption pool ids #3250 - Updated open api file for encryption parts #3250 * PDS - implemented data encryption + documentation #3264 - NONE is default cipher encryption, means startup possible without encryption - summary log service shows encryption algorithm - handled encryption out of sync problems on PDS side and at SecHub side
Bumps [@nuxt/devtools](https://github.com/nuxt/devtools/tree/HEAD/packages/devtools) from 1.0.8 to 1.3.9. - [Release notes](https://github.com/nuxt/devtools/releases) - [Changelog](https://github.com/nuxt/devtools/blob/main/CHANGELOG.md) - [Commits](https://github.com/nuxt/devtools/commits/v1.3.9/packages/devtools) --- updated-dependencies: - dependency-name: "@nuxt/devtools" dependency-type: direct:development ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 4.2.1 to 4.2.2. - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@99b8673...6a0805f) --- updated-dependencies: - dependency-name: actions/setup-java dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps [gradle/actions](https://github.com/gradle/actions) from 3.5.0 to 4. - [Release notes](https://github.com/gradle/actions/releases) - [Commits](gradle/actions@d9c87d4...af1da67) --- updated-dependencies: - dependency-name: gradle/actions dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>
- added archUnit tests for sechub project - fixed rule violations in existing code
- default time now 30 minutes
…ted-outdated-encryption-pool-default Changed default time for accepted outdated encryption pool entry #3342
…/gradle/actions-4 Bump gradle/actions from 3.5.0 to 4
…/actions/setup-java-4.2.2 Bump actions/setup-java from 4.2.1 to 4.2.2
…echub-website/nuxt/devtools-1.3.9 Bump @nuxt/devtools from 1.0.8 to 1.3.9 in /sechub-website
Bumps [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) from 3.10.3 to 3.12.4. - [Release notes](https://github.com/nuxt/nuxt/releases) - [Commits](https://github.com/nuxt/nuxt/commits/v3.12.4/packages/nuxt) --- updated-dependencies: - dependency-name: nuxt dependency-type: direct:development ... Signed-off-by: dependabot[bot] <[email protected]>
…echub-website/nuxt-3.12.4 Bump nuxt from 3.10.3 to 3.12.4 in /sechub-website
- renamed TextFileReader and TextFileWriter methods - renamed TestFileReader and TestFileWriter methods - renamed class TextFileWriter inside docgen to DocGenTextFileWriter (to make it clear this is another class). - renamed class TextFileReader inside docgen to DocGenTextFileReaader (to make it clear this is another class). - DocGenTextFileReader methods renamed - DocGenTextFileWriter methods renamed - Introduced constants - JavaDoc added - Where possible logic from reader/writer is reused now (except in test framework here we have a complete own implementation - but this is wanted)
…-some-settings-as-env-vars server run.sh: use env vars instead of Java parameters #3224
…entation-of-secret-wrapper-validator Improve documentation #3338
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.