Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configure Mend for GitHub.com #1

Open
wants to merge 103 commits into
base: main
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

Welcome to Mend for GitHub.com (formerly WhiteSource). This is an onboarding PR to help you understand and configure settings before Mend starts scanning your repository for security vulnerabilities.

🚦 Mend for GitHub.com will start scanning your repository only once you merge this Pull Request. To disable Mend for GitHub.com, simply close this Pull Request.


What to Expect

This PR contains a '.whitesource' configuration file which can be customized to your needs. If no changes were applied to this file, Mend for GitHub.com will use the default configuration.

Before merging this PR, Make sure the Issues tab is enabled. Once you merge this PR, Mend for GitHub.com will scan your repository and create a GitHub Issue for every vulnerability detected in your repository.

If you do not want a GitHub Issue to be created for each detected vulnerability, you can edit the '.whitesource' file and set the 'minSeverityLevel' parameter to 'NONE'.

If Mend Remediate Workflow Rules are set on your repository (from the Mend 'Integrate' tab), Mend will also generate a fix Pull Request for relevant vulnerabilities.


❓ Got questions? Check out Mend for GitHub.com docs.
If you need any further assistance then you can also request help here.

ansjcy pushed a commit that referenced this pull request Jan 9, 2023
* Migrate frontend to Opensearch

* Add readme for dashboards notifications

* Move notifications-kibana-plugin to dashboards-notifications

* Remove opendistro in dashboards notifications

* Update documents for repo

* rename kibana

* Address comments
joshuali925 and others added 28 commits January 9, 2023 13:52
* Add docs to main branch

* Update pull request template

Signed-off-by: Joshua Li <[email protected]>

* Addrss comments

Signed-off-by: Joshua Li <[email protected]>

* Update readme from develop branch

Signed-off-by: Joshua Li <[email protected]>
* set up integration test base

* update

* update

* update

* update

* update

* addressed comments

* replace TestUtils class with TestHelpers

* changed gson lib to test compile only

* removed unnecessary indents

* added passwordless sudo in build to grant permissions

* excluded integTest in build

* excluded integTest in build

* excluded integTest and test report in build

* excluded integTest and test report in build
* Migrate frontend to Opensearch

* Add readme for dashboards notifications

* Move notifications-kibana-plugin to dashboards-notifications

* Remove opendistro in dashboards notifications

* Update documents for repo

* rename kibana

* Address comments
* Add license headers

Signed-off-by: Joshua Li <[email protected]>

* Update pull request template

Signed-off-by: Joshua Li <[email protected]>
* add jest tests and typo fixes

* fix typo

* remove random mock data

* Add delete recipient group modal

* Rename and remove unused files

* Add more tests

* organize imports

* Organize directories, add sample flyout

* WIP flyout

* Add flyout

* Add more data

* Change renderTime from taking ms to seconds

* Fix typo

* Add jest for flyout

* Add empty state

* UX wording changes

* Update delete modals

* Style updates

* Persistent histogram type

* Write query params to localstorage

* Add amazon ses settings, update UI

* Add amazon sns settings

* Clean up

* Migrate frontend to Opensearch

* Add readme for dashboards notifications

* Move notifications-kibana-plugin to dashboards-notifications

* Fix remaining files from merge conflicts

* Remove opendistro in dashboards notifications

* Add chime settings

* Change to eui markdown editor

* Update documents for repo

* UI changes

* WIP channel details

* Remove yarn.lock in old directory

* Update documents for repo

* Add email channel details

* Add sns details

* Remove unused component

* Add custom webhook details

* Use dropdown actions button instead of delete button in channel details

* Add input validation for create channel

* Add sender input validation

* Add recipient groups input validation

* rename kibana

* Address comments

* bug fix

* Add toasts

* Change nav to opensearch plugins

* Change style of invalid input fields

* Address comments

* Use table for displaying parameters and headers

* Add send test message failed toast

* Add mock data

* Change version to 1.0.0

* Address precheck comments

* Address fit and finish comments

* Add license header

Signed-off-by: Joshua Li <[email protected]>

* Remove empty dependency object in package.json

Signed-off-by: Joshua Li <[email protected]>

* Add license header

Signed-off-by: Joshua Li <[email protected]>

* Change to opensearch

Signed-off-by: Joshua Li <[email protected]>
* Add server and config services for dashboards plugin

Signed-off-by: Joshua Li <[email protected]>

* Bug fix and add unit tests

Signed-off-by: Joshua Li <[email protected]>

* Add service to get email config details

Signed-off-by: Joshua Li <[email protected]>

* Add missing license

Signed-off-by: Joshua Li <[email protected]>
* Integrate sender and recipient related operations

Signed-off-by: Joshua Li <[email protected]>

* Add config id to combo box options

Signed-off-by: Joshua Li <[email protected]>

* Add unit tests for sender and recipient groups

Signed-off-by: Joshua Li <[email protected]>

* Add email groups tests

Signed-off-by: Joshua Li <[email protected]>

* Fix link

Signed-off-by: Joshua Li <[email protected]>
* Add event service and show Dashboard table

Signed-off-by: Joshua Li <[email protected]>

* reformat code

Signed-off-by: Joshua Li <[email protected]>
* Update components to support create channels

Signed-off-by: Joshua Li <[email protected]>

* Use constants for channels

Signed-off-by: Joshua Li <[email protected]>
* Integrate channels table with backend

Signed-off-by: Joshua Li <[email protected]>

* Use constants for channels

Signed-off-by: Joshua Li <[email protected]>
* Update tests and add CI for frontend plugin

Signed-off-by: Joshua Li <[email protected]>

* Add CI

Signed-off-by: Joshua Li <[email protected]>
* Check available features from backend

Signed-off-by: Joshua Li <[email protected]>

* Add timezone when running jest

Signed-off-by: Joshua Li <[email protected]>
peterzhuamazon and others added 27 commits January 9, 2023 13:54
* Update enzyme-adapter-react-16 to 1.15.5 and cypress to 6.0.0

Signed-off-by: Mohammad Qureshi <[email protected]>

* Update yarn.lock

Signed-off-by: Mohammad Qureshi <[email protected]>

* Update Jest snapshots

Signed-off-by: Mohammad Qureshi <[email protected]>
Need to include common to be compiled down with the release
artifact.

Issue resolved:
opensearch-project/notifications#410

Signed-off-by: Kawika Avilla <[email protected]>
Signed-off-by: Kawika Avilla <[email protected]>
* Fix Cypress tests

Signed-off-by: Mohammad Qureshi <[email protected]>

* Update Jest snapshots

Signed-off-by: Mohammad Qureshi <[email protected]>
* Update Cypress tests to not depend on previous tests

Signed-off-by: Mohammad Qureshi <[email protected]>

* Create recipient group in Cypress tests before testing

Signed-off-by: Mohammad Qureshi <[email protected]>
* Allow sender name to contain _ (underscore)

Signed-off-by: Mohammad Qureshi <[email protected]>

* Update Jest test snapshots

Signed-off-by: Mohammad Qureshi <[email protected]>
* Bump gradle version to 7.4.2

Signed-off-by: Mohammad Qureshi <[email protected]>

* Bump Notifications backend to 2.1

Signed-off-by: Mohammad Qureshi <[email protected]>

* Upgrade Notifications Dashboards to 2.1 and add postbuild script for artifact renaming

Signed-off-by: Mohammad Qureshi <[email protected]>

* Remove renaming of Notifications Dashboards artifact in GitHub Action since postbuild script does the same thing

Signed-off-by: Mohammad Qureshi <[email protected]>
…orkflow (#483)

* Run Cypress tests as part of Notifications Dashboards GitHub Action workflow

Signed-off-by: Mohammad Qureshi <[email protected]>

* Use Java 11 for test run

Signed-off-by: Mohammad Qureshi <[email protected]>

* Fix bad indentation

Signed-off-by: Mohammad Qureshi <[email protected]>

* Fix Cypress snapshot and video path

Signed-off-by: Mohammad Qureshi <[email protected]>
* Add workflow to create documentation issues

Signed-off-by: Mohammad Qureshi <[email protected]>

* Add license header to workflow file

Signed-off-by: Mohammad Qureshi <[email protected]>
* Add security tests and workflow plus minor fix

Signed-off-by: Ashish Agrawal <[email protected]>

* fix test and update workflow

Signed-off-by: Ashish Agrawal <[email protected]>

* apply cleanup comments

Signed-off-by: Ashish Agrawal <[email protected]>
* Bump to 2.3.0

Signed-off-by: Mohammad Qureshi <[email protected]>

* Make removal of the existing plugins in the security GitHub Action conditional on its existence in the Docker image

Signed-off-by: Mohammad Qureshi <[email protected]>

* Bump mockito-core to 4.7.0

Signed-off-by: Mohammad Qureshi <[email protected]>

Signed-off-by: Mohammad Qureshi <[email protected]>
* Change the SendTestMessage API to be a POST call

Signed-off-by: Mohammad Qureshi <[email protected]>

* Include GET send test message path as a depricated option until next major version

Signed-off-by: Mohammad Qureshi <[email protected]>

* Update documentation comment for SendTestMessage replaced route

Signed-off-by: Mohammad Qureshi <[email protected]>

Signed-off-by: Mohammad Qureshi <[email protected]>
Bumps [moment](https://github.com/moment/moment) from 2.29.3 to 2.29.4.
- [Release notes](https://github.com/moment/moment/releases)
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md)
- [Commits](moment/moment@2.29.3...2.29.4)

---
updated-dependencies:
- dependency-name: moment
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Add test case for LEGACY SNS and 2.4 version update

Signed-off-by: Ashish Agrawal <[email protected]>
Add build and test workflows for Mac and Windows

Signed-off-by: Mohammad Qureshi <[email protected]>
… (#550)

* Edited help text to reference only the respective sender types.

Signed-off-by: AWSHurneyt <[email protected]>

* Implemented unit tests to confirm SMTP assets are not visible when SMTP is an unsupported config type.

Signed-off-by: AWSHurneyt <[email protected]>

Signed-off-by: AWSHurneyt <[email protected]>
@ansjcy ansjcy requested a review from a team January 9, 2023 21:56
@dblock
Copy link
Member

dblock commented Jul 8, 2024

I believe this repo still needs to be onboarded to Whitesource, assigning to @AWSHurneyt.

[Catch All Triage, attendees 1, 2, 3, 4, 5, 6, 7]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.