Skip to content

Commit 117a750

Browse files
PhBouzidPhBouzid
authored
Merge branch 'main' into fix/resolve_vulnerabilities
2 parents 53d6be2 + ec400e7 commit 117a750

17 files changed

+646
-2
lines changed

‎.editorconfig‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
root = true
2+
3+
[{*,.*}]
4+
charset = utf-8
5+
indent_style = space
6+
insert_final_newline = true
7+
trim_trailing_whitespace = true
8+
9+
[*.sh]
10+
end_of_line = lf
11+
12+
[{*.bat,*.cmd}]
13+
end_of_line = crlf
14+
15+
[*.go]
16+
# gofmt defaults to LF for all the platforms: https://github.com/golang/go/issues/16355
17+
end_of_line = lf
18+
19+
[*.md]
20+
# Trailing whitespace is important in Markdown (they distinguish a new line from a new paragraph)
21+
eclint_indent_style = unset
22+
trim_trailing_whitespace = false
23+
24+
[{go.mod,go.sum,*.go,.gitmodules}]
25+
indent_size = 4
26+
indent_style = tab
27+
28+
[Dockerfile]
29+
indent_size = 4
30+
31+
[*.py]
32+
profile = black
33+
34+
[*.sh]
35+
indent_size = 4

‎.gitattributes‎

Lines changed: 126 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,126 @@
1+
###############################
2+
# Qubership common #
3+
###############################
4+
.editorconfig text
5+
.flake8 text
6+
.gitattributes text
7+
.gitignore text
8+
.helmignore text
9+
.prettierignore text
10+
11+
*.env text eol=lf
12+
*.json text
13+
*.md text
14+
*.mod text
15+
*.robot text
16+
*.sum text
17+
*.tpl text
18+
*.txt text
19+
*.yaml text
20+
*.yml text
21+
22+
LICENSE text
23+
Dockerfile text
24+
25+
/CHANGELOG.md merge=union
26+
/contributors.json merge=union
27+
/CODE-OF-CONDUCT.md text
28+
/CONTRIBUTING.md text
29+
/README.md text
30+
/SECURITY.md text
31+
32+
###############################
33+
# Git Line Endings #
34+
###############################
35+
36+
# Set default behaviour to automatically normalize line endings.
37+
* text=auto
38+
39+
40+
# Force batch scripts to always use CRLF line endings so that if a repo is accessed
41+
# in Windows via a file share from Linux, the scripts will work.
42+
*.{cmd,[cC][mM][dD]} text eol=crlf
43+
*.{bat,[bB][aA][tT]} text eol=crlf
44+
45+
# Force bash scripts to always use LF line endings so that if a repo is accessed
46+
# in Unix via a file share from Windows, the scripts will work.
47+
*.sh text eol=lf
48+
# gofmt defaults to LF for all the platforms: https://github.com/golang/go/issues/16355
49+
*.go text eol=lf
50+
51+
##########################################
52+
# Basic .gitattributes for a Java repo.#
53+
##########################################
54+
55+
# Java sources
56+
*.java text diff=java
57+
*.kt text diff=kotlin
58+
*.groovy text diff=java
59+
*.scala text diff=java
60+
*.gradle text diff=java
61+
*.gradle.kts text diff=kotlin
62+
63+
# These files are text and should be normalized (Convert crlf => lf)
64+
*.css text diff=css
65+
*.scss text diff=css
66+
*.sass text
67+
*.df text
68+
*.htm text diff=html
69+
*.html text diff=html
70+
*.js text
71+
*.mjs text
72+
*.cjs text
73+
*.jsp text
74+
*.jspf text
75+
*.jspx text
76+
*.properties text
77+
*.tld text
78+
*.tag text
79+
*.tagx text
80+
*.xml text
81+
82+
# These files are binary and should be left untouched
83+
# (binary is a macro for -text -diff)
84+
*.class binary
85+
*.dll binary
86+
*.ear binary
87+
*.jar binary
88+
*.so binary
89+
*.war binary
90+
*.jks binary
91+
92+
# Common build-tool wrapper scripts ('.cmd' versions are handled by 'Common.gitattributes')
93+
mvnw text eol=lf
94+
gradlew text eol=lf
95+
96+
##########################################
97+
# Basic .gitattributes for a python repo.#
98+
##########################################
99+
100+
# Source files
101+
# ============
102+
*.pxd text diff=python
103+
*.py text diff=python
104+
*.py3 text diff=python
105+
*.pyw text diff=python
106+
*.pyx text diff=python
107+
*.pyz text diff=python
108+
*.pyi text diff=python
109+
110+
# Binary files
111+
# ============
112+
*.db binary
113+
*.p binary
114+
*.pkl binary
115+
*.pickle binary
116+
*.pyc binary export-ignore
117+
*.pyo binary export-ignore
118+
*.pyd binary
119+
120+
# Jupyter notebook
121+
*.ipynb text eol=lf
122+
123+
# Note: .db, .p, and .pkl files are associated
124+
# with the python modules ``pickle``, ``dbm.*``,
125+
# ``shelve``, ``marshal``, ``anydbm``, & ``bsddb``
126+
# (among others).

‎.github/auto-labeler-config.yaml‎

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
---
2+
conventional-commits:
3+
- type: 'fix'
4+
nouns: ['FIX', 'Fix', 'fix', 'FIXED', 'Fixed', 'fixed']
5+
labels: ['bug']
6+
- type: 'feature'
7+
nouns: ['FEATURE', 'Feature', 'feature', 'FEAT', 'Feat', 'feat']
8+
labels: ['enhancement']
9+
- type: 'breaking_change'
10+
nouns: ['BREAKING CHANGE', 'BREAKING', 'MAJOR']
11+
labels: ['breaking-change']
12+
- type: 'refactor'
13+
nouns: ['refactor', 'Refactor']
14+
labels: ['refactor']
15+
- type: 'documentation'
16+
nouns: ['docs', 'doc', 'document', 'documentation']
17+
labels: ['documentation']
18+
- type: 'build'
19+
nouns: ['build', 'rebuild']
20+
labels: ['build']
21+
- type: 'config'
22+
nouns: ['config', 'conf', 'configuration', 'configure']
23+
labels: ['config']

‎.github/linters/.checkov.yaml‎

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
---
2+
3+
quiet: true
4+
5+
skip-check:
6+
# https://www.checkov.io/5.Policy%20Index/kubernetes.html
7+
- CKV_K8S_15 # Image Pull Policy should be Always
8+
- CKV_K8S_21 # The default namespace should not be used
9+
- CKV_K8S_22 # Use read-only filesystem for containers where possible
10+
- CKV_K8S_35 # Prefer using secrets as files over secrets as environment variables
11+
- CKV_K8S_38 # Ensure that Service Account Tokens are only mounted where necessary
12+
- CKV_K8S_40 # Containers should run as a high UID to avoid host conflict
13+
- CKV_K8S_43 # Image should use digest
14+
- CKV2_K8S_5 # No ServiceAccount/Node should be able to read all secrets
15+
- CKV2_K8S_6 # Minimize the admission of pods which lack an associated NetworkPolicy
16+
# https://www.checkov.io/5.Policy%20Index/dockerfile.html
17+
- CKV_DOCKER_2 # Ensure that HEALTHCHECK instructions have been added to container images
18+
# https://www.checkov.io/5.Policy%20Index/secrets.html
19+
- CKV_SECRET_6 # Base64 High Entropy String
20+
# https://www.checkov.io/5.Policy%20Index/github_actions.html
21+
- CKV2_GHA_1 # Ensure top-level permissions are not set to write-all
22+
- CKV_GHA_7 # The build output cannot be affected by user parameters other than the build entry point and the top-level source location. GitHub Actions workflow_dispatch inputs MUST be empty.

‎.github/linters/.yaml-lint.yml‎

Lines changed: 66 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,66 @@
1+
---
2+
#### Config file for yamllint
3+
# Rules: https://yamllint.readthedocs.io/en/stable/rules.html
4+
5+
# Exclude not required files
6+
# ignore-from-file:
7+
# - .gitignore
8+
# - .yamlignore
9+
10+
rules:
11+
braces:
12+
min-spaces-inside: 1
13+
max-spaces-inside: 1
14+
min-spaces-inside-empty: 0
15+
max-spaces-inside-empty: 0
16+
brackets:
17+
min-spaces-inside: 0
18+
max-spaces-inside: 1
19+
min-spaces-inside-empty: -1
20+
max-spaces-inside-empty: -1
21+
colons:
22+
max-spaces-before: 0
23+
max-spaces-after: -1
24+
commas:
25+
max-spaces-before: 0
26+
min-spaces-after: 1
27+
max-spaces-after: 1
28+
comments:
29+
level: warning
30+
require-starting-space: true
31+
min-spaces-from-content: 1
32+
comments-indentation:
33+
level: warning
34+
document-end: disable
35+
document-start: disable
36+
# level: warning
37+
# present: false
38+
empty-lines:
39+
level: warning
40+
max: 2
41+
max-start: 0
42+
max-end: 2
43+
empty-values:
44+
forbid-in-block-mappings: true
45+
forbid-in-flow-mappings: true
46+
hyphens:
47+
max-spaces-after: 1
48+
indentation:
49+
level: warning
50+
spaces: 2
51+
indent-sequences: true
52+
check-multi-line-strings: false
53+
key-duplicates: enable
54+
key-ordering: disable
55+
line-length: disable
56+
# max: 100
57+
# allow-non-breakable-words: true
58+
# allow-non-breakable-inline-mappings: true
59+
new-line-at-end-of-file: disable
60+
new-lines:
61+
type: unix
62+
octal-values:
63+
forbid-implicit-octal: false
64+
forbid-explicit-octal: false
65+
trailing-spaces: enable
66+
truthy: disable

‎.github/linters/actionlint.yml‎

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
paths:
2+
.github/workflows/**/*.{yml,yaml}:
3+
ignore:
4+
- 'shellcheck reported issue in this script: SC2086:info.+'
5+
- 'shellcheck reported issue in this script: SC2002:style.+'
6+
workflows-templates/**/*.{yml,yaml}:
7+
ignore:
8+
- 'shellcheck reported issue in this script: SC2086:info.+'
9+
- 'shellcheck reported issue in this script: SC2002:style.+'
10+
actions/**/*.{yml,yaml}:
11+
ignore:
12+
- 'shellcheck reported issue in this script: SC2086:info.+'
13+
- 'shellcheck reported issue in this script: SC2002:style.+'

‎.github/release-drafter-config.yml‎

Lines changed: 50 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,50 @@
1+
name-template: 'v$RESOLVED_VERSION'
2+
tag-template: 'v$RESOLVED_VERSION'
3+
4+
5+
categories:
6+
- title: '💥 Breaking Changes'
7+
labels:
8+
- breaking-change
9+
- title: '💡 New Features'
10+
labels:
11+
- feature
12+
- enhancement
13+
- title: '🐞 Bug Fixes'
14+
labels:
15+
- bug
16+
- fix
17+
- bugfix
18+
- title: '⚙️ Technical Debt'
19+
labels:
20+
- refactor
21+
- title: '📝 Documentation'
22+
labels:
23+
- documentation
24+
25+
change-template: |
26+
- (#$NUMBER) $TITLE by @$AUTHOR
27+
28+
no-changes-template: 'No significant changes'
29+
30+
template: |
31+
## 🚀 Release
32+
33+
### What's Changed
34+
$CHANGES
35+
36+
---
37+
38+
**Full Changelog**: https://github.com/$OWNER/$REPOSITORY/compare/$PREVIOUS_TAG...v$RESOLVED_VERSION
39+
40+
version-resolver:
41+
major:
42+
labels:
43+
- major
44+
minor:
45+
labels:
46+
- minor
47+
patch:
48+
labels:
49+
- patch
50+
default: patch

‎.github/super-linter.env‎

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
# File will be loaded as environment variables
2+
# It must contain strings like:
3+
# name=value
4+
5+
GITLEAKS_LOG_LEVEL=warn
6+
VALIDATE_JAVASCRIPT_PRETTIER=false
7+
VALIDATE_JAVASCRIPT_STANDARD=false
8+
VALIDATE_JSCPD=false
9+
VALIDATE_JSON_PRETTIER=false
10+
VALIDATE_KUBERNETES_KUBECONFORM=false
11+
VALIDATE_MARKDOWN_PRETTIER=false
12+
VALIDATE_YAML_PRETTIER=false
13+
14+
# TODO: fix python files and enable the check again
15+
VALIDATE_PYTHON_BLACK=false
16+
VALIDATE_PYTHON_FLAKE8=false
17+
VALIDATE_PYTHON_ISORT=false
18+
VALIDATE_PYTHON_MYPY=false
19+
VALIDATE_PYTHON_PYINK=false
20+
VALIDATE_PYTHON_PYLINT=false

0 commit comments

Comments
 (0)