Skip to content

Ssa package generation ci fix #1792

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
josehelps merged 7 commits into from
Nov 10, 2021
Merged

Ssa package generation ci fix #1792

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
f176eeb
Fixed generation, checksumming, and
pyth0n1c Nov 9, 2021
9cb1346
Realized SSA isn't a full app, it's just
pyth0n1c Nov 9, 2021
5fa9c7a
Comment typo in
pyth0n1c Nov 9, 2021
f31a303
Fixed app.conf so that we can pass appinspect.
pyth0n1c Nov 9, 2021
3bf8de2
changed [stash] in props.conf for devsecops
pyth0n1c Nov 10, 2021
f571854
Removed comment from if: for run_appinspect CI
pyth0n1c Nov 10, 2021
67f77aa
won't ever be a splunk app format as we know it,
josehelps Nov 10, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 16 additions & 13 deletions .github/workflows/build-and-validate.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -262,13 +262,17 @@ jobs:
tar -zxf content-pack-build-escu.tar.gz
tar -zxf content-pack-build-saaws.tar.gz
tar -zxf content-pack-build-devsecops.tar.gz
mv dist/escu DA-ESS-ContentUpdate
mv dist/saaws DA-ESS_AmazonWebServices_Content
tar -zxf content-pack-build-ssa.tar.gz

mv dist/escu DA-ESS-ContentUpdate
mv dist/saaws DA-ESS_AmazonWebServices_Content
mv dist/devsecops dev_sec_ops_analytics
mv dist/ssa SSA_Content

slim package -o upload DA-ESS-ContentUpdate
slim package -o upload DA-ESS_AmazonWebServices_Content
slim package -o upload dev_sec_ops_analytics
#slim package -o upload SSA_Content

cp upload/DA-ESS-ContentUpdate-*.tar.gz DA-ESS-ContentUpdate-latest.tar.gz
sha256sum DA-ESS-ContentUpdate-latest.tar.gz > checksum.txt
Expand All @@ -277,11 +281,16 @@ jobs:
sha256sum DA-ESS_AmazonWebServices_Content-latest.tar.gz >> checksum.txt

cp upload/dev_sec_ops_analytics-*tar.gz dev_sec_ops_analytics-latest.tar.gz
sha256sum dev_sec_ops_analytics-latest.tar.gz >> checksum.txt

cp content-pack-build-ssa.tar.gz upload/SSA_Content-latest.tar.gz
sha256sum upload/SSA_Content-latest.tar.gz >> checksum.txt
#Do this copy so that we conform as much as possible, and have to make
#as few changes as possible, once we start generating this as a real,
#properly packaged app
tar -zcf upload/SSA_Content-NO_SLIM.tar.gz SSA_Content
cp upload/SSA_Content-*.tar.gz SSA_Content-latest.tar.gz
sha256sum SSA_Content-latest.tar.gz >> checksum.txt

touch tag-canary.txt


- name: store_artifacts
uses: actions/upload-artifact@v2
Expand Down Expand Up @@ -331,7 +340,7 @@ jobs:



- name: Submit ESCU Package to AppInspect API
- name: Submit ESCU, SAAWS, dev_sec_ops_analytics, and SSA Packages to AppInspect API
env:
APPINSPECT_USERNAME: ${{ secrets.AppInspectUsername }}
APPINSPECT_PASSWORD: ${{ secrets.AppInspectPassword }}
Expand All @@ -340,14 +349,8 @@ jobs:
#Enclose in quotes in case there are any special characters in the username/password
#Better not to pass these arguments on the command line, if possible
./appinspect.sh ../ DA-ESS-ContentUpdate-latest.tar.gz "$APPINSPECT_USERNAME" "$APPINSPECT_PASSWORD"

- name: Submit SAAWS Package to AppInspect API
env:
APPINSPECT_USERNAME: ${{ secrets.AppInspectUsername }}
APPINSPECT_PASSWORD: ${{ secrets.AppInspectPassword }}
run: |
cd bin
./appinspect.sh ../ DA-ESS_AmazonWebServices_Content-latest.tar.gz "$APPINSPECT_USERNAME" "$APPINSPECT_PASSWORD"
./appinspect.sh ../ dev_sec_ops_analytics-latest.tar.gz "$APPINSPECT_USERNAME" "$APPINSPECT_PASSWORD"

- name: Create report artifact
if: always()
Expand Down
8 changes: 8 additions & 0 deletions dist/devsecops/default/app.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,8 +9,16 @@ is_configured = 0
is_visible = 1
label = Dev Sec Ops Analytics

[triggers]
reload.analytic_stories = simple
reload.analyticstories = simple
reload.es_investigations = simple
reload.use_case_library = simple

[launcher]
author = Splunk Threat Research Team
description =
version = 1.0.0

[package]
check_for_updates = 0
2 changes: 1 addition & 1 deletion dist/devsecops/default/props.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,2 +1,2 @@
[stash]
[MODIFIED-stash]
lookup_image_to_repository = images_to_repository image OUTPUT repository