-
Notifications
You must be signed in to change notification settings - Fork 287
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge branch 'main' into wolfictl-c96cbc83-bacd-4ddc-9b00-315f6f8c73d1
- Loading branch information
Showing
417 changed files
with
4,277 additions
and
1,415 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,8 @@ | ||
| issuer: https://accounts.google.com | ||
|
|
||
| # have more than one service account | ||
| # lc-cve-dashboard-bot@staging-enforce-cd1e.iam.gserviceaccount.com | ||
| subject_pattern: "(107513915972546566458)" | ||
|
|
||
| permissions: | ||
| contents: read |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,119 @@ | ||
| package: | ||
| name: apicurio-registry | ||
| version: 3.0.4 | ||
| epoch: 0 | ||
| description: An API/Schema registry - stores APIs and Schemas | ||
| copyright: | ||
| - license: Apache-2.0 | ||
| target-architecture: | ||
| - x86_64 # Currently, we can't build for aarch64: https://github.com/Apicurio/apicurio-registry/issues/5633 | ||
|
|
||
| environment: | ||
| contents: | ||
| packages: | ||
| - bash | ||
| - build-base | ||
| - busybox | ||
| - ca-certificates-bundle | ||
| - curl | ||
| - go | ||
| - icu | ||
| - maven | ||
| - nodejs-20 | ||
| - npm | ||
| - openjdk-17 | ||
| - openjdk-17-default-jvm | ||
| - openssf-compiler-options | ||
| environment: | ||
| JAVA_HOME: /usr/lib/jvm/java-17-openjdk | ||
|
|
||
| pipeline: | ||
| - uses: git-checkout | ||
| with: | ||
| repository: https://github.com/Apicurio/apicurio-registry | ||
| tag: v${{package.version}} | ||
| expected-commit: f417d2192cdef84dc7587842d98ed721dc3901e3 | ||
|
|
||
| - uses: patch | ||
| with: | ||
| patches: CVE-2024-31141.patch | ||
|
|
||
| - name: Build | ||
| runs: | | ||
| ./mvnw clean install \ | ||
| -Pprod \ | ||
| -DskipTests \ | ||
| -T$(nproc)C \ | ||
| --no-snapshot-updates \ | ||
| --no-transfer-progress \ | ||
| --fail-fast | ||
| - name: Install | ||
| runs: | | ||
| dest="${{targets.contextdir}}/usr/share/java/${{package.name}}" | ||
| mkdir -p "$dest" | ||
| install -Dm644 ./LICENSE "${dest}/LICENSE" | ||
| install -Dm644 ./README.md "${dest}/README.md" | ||
| tar -zxf ./app/target/apicurio-registry-app-${{package.version}}-all.tar.gz -C "$dest" | ||
| find . -type f -path "*/target/*-${{package.version}}.jar" -exec cp {} "$dest" \; | ||
| find . -type f -path "*/target/*-${{package.version}}-runner.jar" -exec cp {} "$dest" \; | ||
| - uses: strip | ||
|
|
||
| subpackages: | ||
| - name: ${{package.name}}-ui | ||
| description: Web UI for Apicurio Registry (apicurio-registry-ui) | ||
| dependencies: | ||
| runtime: | ||
| - nodejs-20 | ||
| pipeline: | ||
| - working-directory: ui | ||
| runs: | | ||
| npm install | ||
| npm audit fix --package-lock-only --legacy-peer-deps || true | ||
| npm run build | ||
| mkdir -p ${{targets.contextdir}}/opt/app-root/src | ||
| cp -r ui-app/dist/* ${{targets.contextdir}}/opt/app-root/src/ | ||
| update: | ||
| enabled: true | ||
| github: | ||
| identifier: Apicurio/apicurio-registry | ||
| use-tag: true | ||
| strip-prefix: v | ||
| tag-filter: v | ||
|
|
||
| test: | ||
| environment: | ||
| contents: | ||
| packages: | ||
| - openjdk-17 | ||
| - openjdk-17-default-jvm | ||
| - bash | ||
| - busybox | ||
| - curl | ||
| - jq | ||
| environment: | ||
| JAVA_HOME: /usr/lib/jvm/java-17-openjdk | ||
| DEST: /usr/share/java/apicurio-registry | ||
| pipeline: | ||
| - name: Validate essential JARs | ||
| runs: | | ||
| stat "$DEST/apicurio-registry-app-${{package.version}}.jar" | ||
| stat "$DEST/apicurio-registry-common-${{package.version}}.jar" | ||
| stat "$DEST/apicurio-registry-utils-tools-${{package.version}}.jar" | ||
| - name: Ensure lib dir | ||
| runs: stat "$DEST/lib" | ||
| - name: "Test runner" | ||
| uses: test/daemon-check-output | ||
| with: | ||
| start: "java -jar $DEST/apicurio-registry-app-${{package.version}}-runner.jar --server.port=8080" | ||
| timeout: 60 | ||
| expected_output: | | ||
| constructed successfully | ||
| Initializing the Apicurio Registry | ||
| post: | | ||
| curl -s http://localhost:8080/apis/registry/v2 | grep -qi "Core Registry API" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,26 @@ | ||
| From 496964795e4c1d2ec92c477dd5d1fe8f5dd59259 Mon Sep 17 00:00:00 2001 | ||
| From: Dentrax <furkan.turkal@chainguard.dev> | ||
| Date: Sun, 1 Dec 2024 18:43:37 +0300 | ||
| Subject: [PATCH] CVE-2024-31141 | ||
|
|
||
| Signed-off-by: Dentrax <furkan.turkal@chainguard.dev> | ||
| --- | ||
| pom.xml | 2 +- | ||
| 1 file changed, 1 insertion(+), 1 deletion(-) | ||
|
|
||
| diff --git a/pom.xml b/pom.xml | ||
| index d520217..aa5bda7 100644 | ||
| --- a/pom.xml | ||
| +++ b/pom.xml | ||
| @@ -215,7 +215,7 @@ | ||
| <jboss-slf4j.version>1.2.1.Final</jboss-slf4j.version> | ||
| <httpclient.version>4.5.14</httpclient.version> | ||
| <apicurio-common-rest-client.version>0.1.18.Final</apicurio-common-rest-client.version> | ||
| - <kafka-clients.version>3.6.0</kafka-clients.version> | ||
| + <kafka-clients.version>3.7.1</kafka-clients.version> | ||
| <debezium.version>2.6.2.Final</debezium.version> | ||
| <pulsar-clients.version>3.3.1</pulsar-clients.version> | ||
| <commons-beanutils.version>1.9.4</commons-beanutils.version> | ||
| -- | ||
| 2.39.5 (Apple Git-154) | ||
|
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.