From b4827ff3529498b0e3fd65c3dac4598058322d16 Mon Sep 17 00:00:00 2001 From: Teodora Sandu Date: Mon, 11 Mar 2024 15:25:51 +0000 Subject: [PATCH 1/2] chore: prodsec security scanning [IDE-158] --- .circleci/config.yml | 34 ++++++++-------------------------- 1 file changed, 8 insertions(+), 26 deletions(-) diff --git a/.circleci/config.yml b/.circleci/config.yml index ac3597c5..80a0b9af 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -1,8 +1,7 @@ version: 2.1 orbs: - snyk: snyk/snyk@1.2.3 - prodsec: snyk/prodsec-orb@1.0 + prodsec: snyk/prodsec-orb@1.1 executors: default: @@ -36,26 +35,13 @@ jobs: - run: name: Build command: make build - snyk-oss: + security-scans: executor: default steps: - checkout - - snyk/scan: - severity-threshold: high - monitor-on-build: true - project: ${CIRCLE_PROJECT_REPONAME} - organization: devex_ide - - snyk-code: - executor: default - steps: - - checkout - - snyk/scan: - command: code test - severity-threshold: high - monitor-on-build: true - project: ${CIRCLE_PROJECT_REPONAME} - organization: devex_ide + - prodsec/security_scans: + mode: auto + iac-scan: disabled # Orchestrate our job run sequence workflows: version: 2 @@ -66,11 +52,8 @@ workflows: context: - snyk-bot-slack channel: team-ide - - snyk-oss: - name: Snyk Open Source - context: code-client-go - - snyk-code: - name: Snyk Code + - security-scans: + name: Security Scans context: code-client-go - lint-and-format: name: Lint & Format @@ -82,6 +65,5 @@ workflows: name: Build requires: - Unit tests - - Snyk Open Source - - Snyk Code + - Security Scans - Scan repository for secrets From 23a2061fdd0257d04cbfd19b6875903dcdfd8b6b Mon Sep 17 00:00:00 2001 From: Teodora Sandu Date: Mon, 11 Mar 2024 16:05:37 +0000 Subject: [PATCH 2/2] fix: package name --- .circleci/config.yml | 2 +- sarif_types.go | 2 +- scan.go | 2 +- scan_test.go | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.circleci/config.yml b/.circleci/config.yml index 80a0b9af..0eb6c430 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -1,7 +1,7 @@ version: 2.1 orbs: - prodsec: snyk/prodsec-orb@1.1 + prodsec: snyk/prodsec-orb@1 executors: default: diff --git a/sarif_types.go b/sarif_types.go index 25d9885f..8e880c4f 100644 --- a/sarif_types.go +++ b/sarif_types.go @@ -15,7 +15,7 @@ */ //nolint:revive,tagliatelle // These are all SARIF documented types that need to match the exact JSON format. -package codeClient +package codeclient type SarifResponse struct { Type string `json:"type"` diff --git a/scan.go b/scan.go index 913eb245..bbac319e 100644 --- a/scan.go +++ b/scan.go @@ -15,7 +15,7 @@ */ //nolint:lll // Some of the lines in this file are going to be long for now. -package codeClient +package codeclient import ( "encoding/json" diff --git a/scan_test.go b/scan_test.go index c50aa2eb..f60efb6e 100644 --- a/scan_test.go +++ b/scan_test.go @@ -1,4 +1,4 @@ -package codeClient_test +package codeclient_test import ( "testing"