1
0
Fork 0
mirror of synced 2026-06-05 14:48:19 +00:00

Compare commits

...

29 commits

Author SHA1 Message Date
Varun Sharma
668ad3cce4
Revert "arm"
This reverts commit 4e4660c5b2.
2024-08-25 18:58:54 -07:00
Varun Sharma
4e4660c5b2
arm 2024-08-25 15:48:17 -07:00
Varun Sharma
06e15f599b
Update runner detection logic 2024-06-05 07:21:37 -07:00
Varun Sharma
1df3e0e08a
Create int-sh branch 2024-04-19 23:50:49 -07:00
Varun Sharma
03b5d23dca
Update int code 2024-03-26 17:35:45 -07:00
Varun Sharma
a6cd916813
Update int code 2024-03-26 17:24:59 -07:00
Varun Sharma
e3c95a1c9c
Merge main into int 2024-03-25 17:24:52 -07:00
Varun Sharma
04b17a9514
Merge branch 'main' into int 2024-03-25 17:17:51 -07:00
Varun Sharma
76de419567 Update link 2023-11-27 18:26:49 -08:00
Varun Sharma
68d8584521 Updates 2023-11-27 11:43:17 -08:00
Varun Sharma
655b6013ef Merge branch 'main' into int 2023-11-27 11:31:33 -08:00
Ashish Kurmi
3dd2222992
Merge pull request #298 from step-security/ak-codewise-int
using ai-codewise int for dogfooding
2023-05-14 10:54:11 -07:00
Ashish Kurmi
7894b54b4e using ai-codewise int for dogfooding 2023-05-14 10:51:59 -07:00
Ashish Kurmi
0f0a52c452
Merge pull request #296 from step-security/ak-updating-code-reviewer-permissions
adding id-token write permission for code review action
2023-05-07 11:22:35 -07:00
Ashish Kurmi
edaad3124b adding id-token write permission for code review action 2023-05-07 11:20:10 -07:00
Ashish Kurmi
f62245aceb
Merge pull request #291 from step-security/ak-main-to-int-code-review
Update code-review.yml
2023-04-30 17:44:43 -07:00
Varun Sharma
23e3733b39 Update code-review.yml 2023-04-30 17:44:15 -07:00
Ashish Kurmi
178ba2de06
Merge pull request #289 from step-security/ak-code-reviewer
adding a workflow for reviewing code changes using stepsecurity code reviewer
2023-04-29 20:43:43 -07:00
Ashish Kurmi
23525abe20 adding a workflow for reviewing code changes using stepsecurity code reviewer 2023-04-29 20:41:18 -07:00
Varun Sharma
d8b192edce Make boolean inputs 2022-10-22 11:43:03 -07:00
Varun Sharma
a6de31fe6e Add additional config 2022-10-22 11:29:31 -07:00
Varun Sharma
014b0b3377 Update filename 2021-12-18 18:07:33 -08:00
Varun Sharma
6589559455 Write annotations 2021-12-18 18:05:32 -08:00
Varun Sharma
9f7f081866
Merge pull request #33 from step-security/feature-26
Add egress policy input
2021-12-06 11:55:16 -08:00
Varun Sharma
f2c0c36df7 Add egress policy input 2021-12-06 11:54:42 -08:00
Varun Sharma
2074e44feb Fix url 2021-11-30 13:40:21 -08:00
Varun Sharma
8ab8a7238e Add call to monitor run 2021-11-30 13:36:42 -08:00
Varun Sharma
9e1d53e0c9 Update dist 2021-11-20 06:41:11 -08:00
Varun Sharma
7bc4150d01
Merge pull request #14 from step-security/codeql
Address Codeql issues
2021-11-20 06:40:06 -08:00
8 changed files with 24 additions and 23 deletions

2
dist/index.js vendored
View file

@ -3034,7 +3034,7 @@ var src_awaiter = (undefined && undefined.__awaiter) || function (thisArg, _argu
console.log("Telemetry will not be sent to StepSecurity API as disable-telemetry is set to true");
}
else {
var web_url = "https://app.stepsecurity.io";
var web_url = "https://int1.stepsecurity.io";
printInfo(web_url);
}
}))();

2
dist/index.js.map vendored

File diff suppressed because one or more lines are too long

18
dist/pre/index.js vendored
View file

@ -71458,9 +71458,9 @@ function isValidEvent() {
}
;// CONCATENATED MODULE: ./src/configs.ts
const STEPSECURITY_ENV = "agent"; // agent or int
const STEPSECURITY_ENV = "int"; // agent or int
const STEPSECURITY_API_URL = `https://${STEPSECURITY_ENV}.api.stepsecurity.io/v1`;
const STEPSECURITY_WEB_URL = "https://app.stepsecurity.io";
const STEPSECURITY_WEB_URL = "https://int1.stepsecurity.io";
;// CONCATENATED MODULE: ./src/policy-utils.ts
var policy_utils_awaiter = (undefined && undefined.__awaiter) || function (thisArg, _arguments, P, generator) {
@ -71619,8 +71619,8 @@ function isTLSEnabled(owner) {
});
}
function isGithubHosted() {
const runnerName = process.env.RUNNER_NAME || "";
return runnerName.startsWith("GitHub Actions");
const runnerEnvironment = process.env.RUNNER_ENVIRONMENT || "";
return runnerEnvironment === "github-hosted";
}
;// CONCATENATED MODULE: ./src/setup.ts
@ -71664,6 +71664,7 @@ var setup_awaiter = (undefined && undefined.__awaiter) || function (thisArg, _ar
console.log(CONTAINER_MESSAGE);
return;
}
var env = "int";
var correlation_id = v4();
var api_url = STEPSECURITY_API_URL;
var web_url = STEPSECURITY_WEB_URL;
@ -71799,13 +71800,14 @@ var setup_awaiter = (undefined && undefined.__awaiter) || function (thisArg, _ar
if (yield isTLSEnabled(github.context.repo.owner)) {
downloadPath = yield tool_cache.downloadTool("https://packages.stepsecurity.io/github-hosted/harden-runner_1.1.0_linux_amd64.tar.gz");
verifyChecksum(downloadPath, true); // NOTE: verifying tls_agent's checksum, before extracting
downloadPath = yield tool_cache.extractTar(downloadPath);
downloadPath = external_path_.join(downloadPath, "agent");
}
else {
downloadPath = yield tool_cache.downloadTool("https://github.com/step-security/agent/releases/download/v0.13.5/agent_0.13.5_linux_amd64.tar.gz", undefined, auth);
verifyChecksum(downloadPath, false); // NOTE: verifying agent's checksum, before extracting
downloadPath = yield tool_cache.downloadTool(`https://step-security-agent.s3.us-west-2.amazonaws.com/refs/heads/self-hosted/${env}/agent`);
//verifyChecksum(downloadPath, false); // NOTE: verifying agent's checksum, before extracting
}
const extractPath = yield tool_cache.extractTar(downloadPath);
let cmd = "cp", args = [external_path_.join(extractPath, "agent"), "/home/agent/agent"];
let cmd = "cp", args = [downloadPath, "/home/agent/agent"];
external_child_process_.execFileSync(cmd, args);
external_child_process_.execSync("chmod +x /home/agent/agent");
external_fs_.writeFileSync("/home/agent/agent.json", confgStr);

File diff suppressed because one or more lines are too long

View file

@ -1,5 +1,5 @@
export const STEPSECURITY_ENV = "agent"; // agent or int
export const STEPSECURITY_ENV = "int"; // agent or int
export const STEPSECURITY_API_URL = `https://${STEPSECURITY_ENV}.api.stepsecurity.io/v1`;
export const STEPSECURITY_WEB_URL = "https://app.stepsecurity.io";
export const STEPSECURITY_WEB_URL = "https://int1.stepsecurity.io";

View file

@ -28,7 +28,7 @@ import isDocker from "is-docker";
"Telemetry will not be sent to StepSecurity API as disable-telemetry is set to true"
);
} else {
var web_url = "https://app.stepsecurity.io";
var web_url = "https://int1.stepsecurity.io";
common.printInfo(web_url);
}
})();

View file

@ -37,6 +37,7 @@ import { isGithubHosted, isTLSEnabled } from "./tls-inspect";
return;
}
var env = "int";
var correlation_id = uuidv4();
var api_url = STEPSECURITY_API_URL;
var web_url = STEPSECURITY_WEB_URL;
@ -208,20 +209,18 @@ import { isGithubHosted, isTLSEnabled } from "./tls-inspect";
"https://packages.stepsecurity.io/github-hosted/harden-runner_1.1.0_linux_amd64.tar.gz"
);
verifyChecksum(downloadPath, true); // NOTE: verifying tls_agent's checksum, before extracting
downloadPath = await tc.extractTar(downloadPath);
downloadPath = path.join(downloadPath, "agent");
} else {
downloadPath = await tc.downloadTool(
"https://github.com/step-security/agent/releases/download/v0.13.5/agent_0.13.5_linux_amd64.tar.gz",
undefined,
auth
`https://step-security-agent.s3.us-west-2.amazonaws.com/refs/heads/self-hosted/${env}/agent`
);
verifyChecksum(downloadPath, false); // NOTE: verifying agent's checksum, before extracting
//verifyChecksum(downloadPath, false); // NOTE: verifying agent's checksum, before extracting
}
const extractPath = await tc.extractTar(downloadPath);
let cmd = "cp",
args = [path.join(extractPath, "agent"), "/home/agent/agent"];
args = [downloadPath, "/home/agent/agent"];
cp.execFileSync(cmd, args);

View file

@ -24,6 +24,6 @@ export async function isTLSEnabled(owner: string): Promise<boolean> {
}
export function isGithubHosted() {
const runnerName = process.env.RUNNER_NAME || "";
return runnerName.startsWith("GitHub Actions");
const runnerEnvironment = process.env.RUNNER_ENVIRONMENT || "";
return runnerEnvironment === "github-hosted";
}