Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configure Mend for GitHub.com #1

Open
wants to merge 103 commits into
base: main
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

Welcome to Mend for GitHub.com (formerly WhiteSource). This is an onboarding PR to help you understand and configure settings before Mend starts scanning your repository for security vulnerabilities.

🚦 Mend for GitHub.com will start scanning your repository only once you merge this Pull Request. To disable Mend for GitHub.com, simply close this Pull Request.


What to Expect

This PR contains a '.whitesource' configuration file which can be customized to your needs. If no changes were applied to this file, Mend for GitHub.com will use the default configuration.

Before merging this PR, Make sure the Issues tab is enabled. Once you merge this PR, Mend for GitHub.com will scan your repository and create a GitHub Issue for every vulnerability detected in your repository.

If you do not want a GitHub Issue to be created for each detected vulnerability, you can edit the '.whitesource' file and set the 'minSeverityLevel' parameter to 'NONE'.

If Mend Remediate Workflow Rules are set on your repository (from the Mend 'Integrate' tab), Mend will also generate a fix Pull Request for relevant vulnerabilities.


❓ Got questions? Check out Mend for GitHub.com docs.
If you need any further assistance then you can also request help here.

ansjcy pushed a commit that referenced this pull request Jan 9, 2023
* Migrate frontend to Opensearch

* Add readme for dashboards notifications

* Move notifications-kibana-plugin to dashboards-notifications

* Remove opendistro in dashboards notifications

* Update documents for repo

* rename kibana

* Address comments
joshuali925 and others added 28 commits January 9, 2023 13:52
* Add docs to main branch

* Update pull request template

Signed-off-by: Joshua Li <joshuali925@gmail.com>

* Addrss comments

Signed-off-by: Joshua Li <joshuali925@gmail.com>

* Update readme from develop branch

Signed-off-by: Joshua Li <joshuali925@gmail.com>
Signed-off-by: Vacha Shah <vachshah@amazon.com>
* set up integration test base

* update

* update

* update

* update

* update

* addressed comments

* replace TestUtils class with TestHelpers

* changed gson lib to test compile only

* removed unnecessary indents

* added passwordless sudo in build to grant permissions

* excluded integTest in build

* excluded integTest in build

* excluded integTest and test report in build

* excluded integTest and test report in build
* Migrate frontend to Opensearch

* Add readme for dashboards notifications

* Move notifications-kibana-plugin to dashboards-notifications

* Remove opendistro in dashboards notifications

* Update documents for repo

* rename kibana

* Address comments
* Add license headers

Signed-off-by: Joshua Li <joshuali925@gmail.com>

* Update pull request template

Signed-off-by: Joshua Li <joshuali925@gmail.com>
* add jest tests and typo fixes

* fix typo

* remove random mock data

* Add delete recipient group modal

* Rename and remove unused files

* Add more tests

* organize imports

* Organize directories, add sample flyout

* WIP flyout

* Add flyout

* Add more data

* Change renderTime from taking ms to seconds

* Fix typo

* Add jest for flyout

* Add empty state

* UX wording changes

* Update delete modals

* Style updates

* Persistent histogram type

* Write query params to localstorage

* Add amazon ses settings, update UI

* Add amazon sns settings

* Clean up

* Migrate frontend to Opensearch

* Add readme for dashboards notifications

* Move notifications-kibana-plugin to dashboards-notifications

* Fix remaining files from merge conflicts

* Remove opendistro in dashboards notifications

* Add chime settings

* Change to eui markdown editor

* Update documents for repo

* UI changes

* WIP channel details

* Remove yarn.lock in old directory

* Update documents for repo

* Add email channel details

* Add sns details

* Remove unused component

* Add custom webhook details

* Use dropdown actions button instead of delete button in channel details

* Add input validation for create channel

* Add sender input validation

* Add recipient groups input validation

* rename kibana

* Address comments

* bug fix

* Add toasts

* Change nav to opensearch plugins

* Change style of invalid input fields

* Address comments

* Use table for displaying parameters and headers

* Add send test message failed toast

* Add mock data

* Change version to 1.0.0

* Address precheck comments

* Address fit and finish comments

* Add license header

Signed-off-by: Joshua Li <joshuali925@gmail.com>

* Remove empty dependency object in package.json

Signed-off-by: Joshua Li <joshuali925@gmail.com>

* Add license header

Signed-off-by: Joshua Li <joshuali925@gmail.com>

* Change to opensearch

Signed-off-by: Joshua Li <joshuali925@gmail.com>
* Add server and config services for dashboards plugin

Signed-off-by: Joshua Li <joshuali925@gmail.com>

* Bug fix and add unit tests

Signed-off-by: Joshua Li <joshuali925@gmail.com>

* Add service to get email config details

Signed-off-by: Joshua Li <joshuali925@gmail.com>

* Add missing license

Signed-off-by: Joshua Li <joshuali925@gmail.com>
* Integrate sender and recipient related operations

Signed-off-by: Joshua Li <joshuali925@gmail.com>

* Add config id to combo box options

Signed-off-by: Joshua Li <joshuali925@gmail.com>

* Add unit tests for sender and recipient groups

Signed-off-by: Joshua Li <joshuali925@gmail.com>

* Add email groups tests

Signed-off-by: Joshua Li <joshuali925@gmail.com>

* Fix link

Signed-off-by: Joshua Li <joshuali925@gmail.com>
Signed-off-by: Joshua Li <joshuali925@gmail.com>
* Add event service and show Dashboard table

Signed-off-by: Joshua Li <joshuali925@gmail.com>

* reformat code

Signed-off-by: Joshua Li <joshuali925@gmail.com>
* Update components to support create channels

Signed-off-by: Joshua Li <joshuali925@gmail.com>

* Use constants for channels

Signed-off-by: Joshua Li <joshuali925@gmail.com>
* Integrate channels table with backend

Signed-off-by: Joshua Li <joshuali925@gmail.com>

* Use constants for channels

Signed-off-by: Joshua Li <joshuali925@gmail.com>
Signed-off-by: Joshua Li <joshuali925@gmail.com>
* Update tests and add CI for frontend plugin

Signed-off-by: Joshua Li <joshuali925@gmail.com>

* Add CI

Signed-off-by: Joshua Li <joshuali925@gmail.com>
* Check available features from backend

Signed-off-by: Joshua Li <joshuali925@gmail.com>

* Add timezone when running jest

Signed-off-by: Joshua Li <joshuali925@gmail.com>
Signed-off-by: Zhongnan Su <szhongna@amazon.com>
peterzhuamazon and others added 27 commits January 9, 2023 13:54
Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>
* Update enzyme-adapter-react-16 to 1.15.5 and cypress to 6.0.0

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>

* Update yarn.lock

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>

* Update Jest snapshots

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>
Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
Signed-off-by: Kawika Avilla <kavilla414@gmail.com>
Need to include common to be compiled down with the release
artifact.

Issue resolved:
opensearch-project/notifications#410

Signed-off-by: Kawika Avilla <kavilla414@gmail.com>
Signed-off-by: Kawika Avilla <kavilla414@gmail.com>
Signed-off-by: dblock <dblock@dblock.org>
Signed-off-by: bowenlan-amzn <bowenlan23@gmail.com>
Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>
* Fix Cypress tests

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>

* Update Jest snapshots

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>
Signed-off-by: AWSHurneyt <hurneyt@amazon.com>
…rity alerts.

Signed-off-by: AWSHurneyt <hurneyt@amazon.com>
* Update Cypress tests to not depend on previous tests

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>

* Create recipient group in Cypress tests before testing

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>
… address dependabot alerts.

Signed-off-by: AWSHurneyt <hurneyt@amazon.com>
* Allow sender name to contain _ (underscore)

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>

* Update Jest test snapshots

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>
Signed-off-by: Aditya Jindal <aditjind@amazon.com>
* Bump gradle version to 7.4.2

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>

* Bump Notifications backend to 2.1

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>

* Upgrade Notifications Dashboards to 2.1 and add postbuild script for artifact renaming

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>

* Remove renaming of Notifications Dashboards artifact in GitHub Action since postbuild script does the same thing

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>
…orkflow (#483)

* Run Cypress tests as part of Notifications Dashboards GitHub Action workflow

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>

* Use Java 11 for test run

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>

* Fix bad indentation

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>

* Fix Cypress snapshot and video path

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>
* Add workflow to create documentation issues

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>

* Add license header to workflow file

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>
* Add security tests and workflow plus minor fix

Signed-off-by: Ashish Agrawal <ashisagr@amazon.com>

* fix test and update workflow

Signed-off-by: Ashish Agrawal <ashisagr@amazon.com>

* apply cleanup comments

Signed-off-by: Ashish Agrawal <ashisagr@amazon.com>
* Bump to 2.3.0

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>

* Make removal of the existing plugins in the security GitHub Action conditional on its existence in the Docker image

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>

* Bump mockito-core to 4.7.0

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>
* Change the SendTestMessage API to be a POST call

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>

* Include GET send test message path as a depricated option until next major version

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>

* Update documentation comment for SendTestMessage replaced route

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>
Bumps [moment](https://github.com/moment/moment) from 2.29.3 to 2.29.4.
- [Release notes](https://github.com/moment/moment/releases)
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md)
- [Commits](moment/moment@2.29.3...2.29.4)

---
updated-dependencies:
- dependency-name: moment
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Add test case for LEGACY SNS and 2.4 version update

Signed-off-by: Ashish Agrawal <ashisagr@amazon.com>
Add build and test workflows for Mac and Windows

Signed-off-by: Mohammad Qureshi <47198598+qreshi@users.noreply.github.com>
… (#550)

* Edited help text to reference only the respective sender types.

Signed-off-by: AWSHurneyt <hurneyt@amazon.com>

* Implemented unit tests to confirm SMTP assets are not visible when SMTP is an unsupported config type.

Signed-off-by: AWSHurneyt <hurneyt@amazon.com>

Signed-off-by: AWSHurneyt <hurneyt@amazon.com>
@ansjcy ansjcy requested a review from a team January 9, 2023 21:56
@dblock
Copy link
Member

dblock commented Jul 8, 2024

I believe this repo still needs to be onboarded to Whitesource, assigning to @AWSHurneyt.

[Catch All Triage, attendees 1, 2, 3, 4, 5, 6, 7]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.