Skip to content

Commit 8f5310f

Browse files
tbelmegatbelmega
authored
Merge pull request #149 from aws-solutions/release/v2.0.0
Release v2.0.0
2 parents ef38ff8 + 446b772 commit 8f5310f

File tree

600 files changed

+66119
-11403
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

600 files changed

+66119
-11403
lines changed

‎.github/workflows/build.yml‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
name: Build
2+
on:
3+
push:
4+
pull_request:
5+
types: [opened, edited, reopened, synchronize]
6+
jobs:
7+
build:
8+
name: Build
9+
if: ${{ (github.repository_owner != 'aws-solutions' && github.event_name == 'push') || (github.repository_owner == 'aws-solutions' && github.event_name == 'pull_request') }}
10+
runs-on: ubuntu-latest
11+
defaults:
12+
run:
13+
working-directory: source
14+
strategy:
15+
matrix:
16+
node-version: [16]
17+
steps:
18+
- uses: actions/checkout@v3
19+
- uses: actions/setup-node@v3
20+
with:
21+
node-version: ${{ matrix.node-version }}
22+
cache: npm
23+
cache-dependency-path: source/package-lock.json
24+
- run: npm ci
25+
- run: npm run build

‎.github/workflows/cdk-nag.yml‎

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
name: CDK Nag
2+
on:
3+
push:
4+
pull_request:
5+
types: [opened, edited, reopened, synchronize]
6+
jobs:
7+
cdk-nag:
8+
name: CDK Nag
9+
if: ${{ (github.repository_owner != 'aws-solutions' && github.event_name == 'push') || (github.repository_owner == 'aws-solutions' && github.event_name == 'pull_request') }}
10+
runs-on: ubuntu-latest
11+
defaults:
12+
run:
13+
working-directory: source
14+
strategy:
15+
matrix:
16+
node-version: [16]
17+
working-directory:
18+
- solution_deploy
19+
- playbooks/AFSBP
20+
- playbooks/CIS120
21+
- playbooks/CIS140
22+
- playbooks/NEWPLAYBOOK
23+
- playbooks/PCI321
24+
- playbooks/SC
25+
steps:
26+
- uses: actions/checkout@v3
27+
- uses: actions/setup-node@v3
28+
with:
29+
node-version: ${{ matrix.node-version }}
30+
cache: npm
31+
cache-dependency-path: source/package-lock.json
32+
- run: npm ci
33+
- run: cd ${{ matrix.working-directory }} && npx cdk synth

‎.github/workflows/code-style-lint.yml‎

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
name: Code Style and Lint
2+
on:
3+
push:
4+
pull_request:
5+
types: [opened, edited, reopened, synchronize]
6+
jobs:
7+
prettier:
8+
name: Style Check
9+
if: ${{ (github.repository_owner != 'aws-solutions' && github.event_name == 'push') || (github.repository_owner == 'aws-solutions' && github.event_name == 'pull_request') }}
10+
runs-on: ubuntu-latest
11+
defaults:
12+
run:
13+
working-directory: source
14+
strategy:
15+
matrix:
16+
node-version: [16]
17+
steps:
18+
- uses: actions/checkout@v3
19+
- uses: actions/setup-node@v3
20+
with:
21+
node-version: ${{ matrix.node-version }}
22+
cache: npm
23+
cache-dependency-path: source/package-lock.json
24+
- run: npm ci
25+
- run: npx prettier --check '**/*.ts'
26+
eslint:
27+
name: ESLint
28+
if: ${{ (github.repository_owner != 'aws-solutions' && github.event_name == 'push') || (github.repository_owner == 'aws-solutions' && github.event_name == 'pull_request') }}
29+
runs-on: ubuntu-latest
30+
defaults:
31+
run:
32+
working-directory: source
33+
strategy:
34+
matrix:
35+
node-version: [16]
36+
steps:
37+
- uses: actions/checkout@v3
38+
- uses: actions/setup-node@v3
39+
with:
40+
node-version: ${{ matrix.node-version }}
41+
cache: npm
42+
cache-dependency-path: source/package-lock.json
43+
- run: npm ci
44+
- run: npx eslint --ext .ts --max-warnings=0 .

‎.github/workflows/codeql.yml‎

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
name: CodeQL
2+
on:
3+
push:
4+
pull_request:
5+
types: [opened, edited, reopened, synchronize]
6+
jobs:
7+
codeql:
8+
name: CodeQL
9+
if: ${{ (github.repository_owner != 'aws-solutions' && github.event_name == 'push') || (github.repository_owner == 'aws-solutions' && github.event_name == 'pull_request') }}
10+
runs-on: ubuntu-latest
11+
strategy:
12+
fail-fast: false
13+
matrix:
14+
language: [javascript, typescript]
15+
steps:
16+
- uses: actions/checkout@v3
17+
- uses: github/codeql-action/init@v2
18+
with:
19+
languages: ${{ matrix.language }}
20+
- uses: github/codeql-action/analyze@v2

‎.github/workflows/solutions-pipeline.yml‎

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
name: Solutions Pipeline
2+
env:
3+
REGION: us-east-1
4+
on: push
5+
jobs:
6+
solutions-pipeline:
7+
name: Solutions Pipeline
8+
if: github.repository_owner == 'aws-solutions'
9+
runs-on: ubuntu-latest
10+
permissions:
11+
id-token: write
12+
steps:
13+
- name: Configure AWS credentials
14+
uses: aws-actions/configure-aws-credentials@v1
15+
with:
16+
role-to-assume: ${{ secrets.DISPATCHER_ROLE_ARN }}
17+
aws-region: ${{ env.REGION }}
18+
role-duration-seconds: 900
19+
role-session-name: OIDCSession
20+
- name: Run CodeBuild
21+
uses: aws-actions/aws-codebuild-run-build@v1
22+
with:
23+
project-name: ${{ secrets.DISPATCHER_CODEBUILD_PROJECT_NAME }}

‎.github/workflows/unit-test.yml‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
name: Unit Test
2+
on:
3+
push:
4+
pull_request:
5+
types: [opened, edited, reopened, synchronize]
6+
jobs:
7+
unit-test:
8+
name: Unit Test
9+
if: ${{ (github.repository_owner != 'aws-solutions' && github.event_name == 'push') || (github.repository_owner == 'aws-solutions' && github.event_name == 'pull_request') }}
10+
runs-on: ubuntu-latest
11+
defaults:
12+
run:
13+
working-directory: source
14+
strategy:
15+
matrix:
16+
node-version: [16]
17+
steps:
18+
- uses: actions/checkout@v3
19+
- uses: actions/setup-node@v3
20+
with:
21+
node-version: ${{ matrix.node-version }}
22+
cache: npm
23+
cache-dependency-path: source/package-lock.json
24+
- run: npm ci
25+
- run: cd ../deployment && DEBUG=true ./run-unit-tests.sh

‎.github/workflows/viperlight.yml‎

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
name: Viperlight
2+
on:
3+
pull_request:
4+
types: [opened, edited, reopened, synchronize]
5+
jobs:
6+
viperlight:
7+
name: Viperlight
8+
runs-on: ubuntu-latest
9+
steps:
10+
- uses: actions/checkout@v3
11+
- run: curl https://viperlight-scanner.s3.amazonaws.com/latest/viperlight.zip -o ./viperlight.zip
12+
- run: unzip -q ./viperlight.zip -d ../viperlight && rm ./viperlight.zip
13+
- run: |
14+
../viperlight/bin/viperlight scan \
15+
-m files-contents \
16+
-m files-aws \
17+
-m files-binary \
18+
-m files-entropy \
19+
-m files-secrets

‎.gitignore‎

Lines changed: 31 additions & 61 deletions
Original file line numberDiff line numberDiff line change
@@ -1,69 +1,39 @@
1+
# build
2+
/deployment/global-s3-assets/
3+
/deployment/open-source/
4+
/deployment/regional-s3-assets/
5+
/deployment/setenv.sh
6+
/deployment/temp/
7+
8+
# test
9+
/deployment/test/coverage-reports/
10+
11+
# Typescript
12+
/source/dist/
13+
*.d.ts
14+
*.js
115

2-
.DS_Store
3-
inputs.md/*
4-
source/example*
5-
**/__pycache__/*
6-
source/playbooks/**/_description.txt
7-
deployment/temp/*
8-
deployment/test/*
9-
10-
**/build
11-
**/package
12-
**/global-s3-assets
13-
**/regional-s3-assets
14-
**/open-source
15-
**/.zip
16-
**/tmp
17-
**/out-tsc
18-
19-
# dependencies
20-
**/node_modules
21-
22-
# coverage
23-
**/coverage
24-
**/package
25-
**/.coverage
26-
27-
# misc
28-
**/npm-debug.log
29-
**/testem.log
30-
**/.vscode/settings.json
31-
**/*.zip
32-
**/*local-runner*
33-
**/*create-stack.sh
34-
16+
# config
17+
!.eslintrc.js
3518

36-
# System Files
37-
**/.DS_Store
38-
**/.vscode
19+
# Node
20+
node_modules/
3921

40-
# CDK files
41-
*.js
42-
!jest.config.js
43-
*.d.ts
44-
node_modules
22+
# CDK
23+
cdk.out/
4524

46-
# CDK asset staging directory
47-
.cdk.staging
48-
cdk.out
25+
# Jest
26+
coverage/
4927

50-
# Python modules
51-
*.dist-info
52-
source/solution_deploy/source/certifi
53-
source/solution_deploy/source/chardet
54-
source/solution_deploy/source/idna
55-
source/solution_deploy/source/requests
56-
source/solution_deploy/source/urllib3
28+
# Python
29+
.venv/
30+
__pycache__/
5731

58-
# Parcel build directories
59-
.cache
60-
.build
32+
# pytest
33+
.coverage
6134

62-
*.idea
35+
# IDE
36+
.vscode/
6337

64-
# Build files
65-
source/playbooks/*/template
66-
deployment/setenv.sh
67-
source/solution_deploy/source/bin
68-
source/playbooks/*/source/lib/*
69-
deployment/temp
38+
# system
39+
.DS_Store

‎.viperlightignore‎

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
# CDK files - files produced/installed by CDK
2+
# js files produced by npm
3+
.*.js
4+
# jest.config
5+
.*.d.ts
6+
.*/node_modules/
7+
.cdk.staging
8+
.*/package-lock.json
9+
# Developer work files - not present in pipeline
10+
deployment/build/
11+
deployment/temp/
12+
deployment/global-s3-assets/
13+
deployment/regional-s3-assets/
14+
deployment/open-source/
15+
deployment/test/
16+
# ignore own scan file
17+
vlscan.json
18+
# Ignore repo Config
19+
Config
20+
.venv
21+
22+
[python-pipoutdated]
23+
boto3=1.20.32 # Should match Lambda runtime: https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html

‎.viperlightrc‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
{
2+
"failOn": "medium",
3+
"all": true
4+
}

0 commit comments

Comments
 (0)