boundary

Commit Graph

Author	SHA1	Message	Date
Johan Brandhorst-Satzkorn	0ef88d0f05	Add semgrep rules (#5042 ) * Add semgrep rules Instrument our security scanner with the ability to use custom semgrep rules. This is inspired by the HVS teams use of semgrep. * semgrep: add rule to detect string interpolation in WithInfoMsg The event.WithInfoMsg function expects a set of key value tuples, but it can easily be misunderstood to accept string interpolation arguments. This check will error if any string interpolation verbs are used in calls to event.WithInfoMsg	2 years ago
Mark Collao	22d400674a	turn on osv scanning (#3954 )	2 years ago
hashicorp-copywrite[bot]	29da0bcb92	[COMPLIANCE] License changes (#3567 ) * Adding explicit MPL license for sub-package. This directory and its subdirectories (packages) contain files licensed with the MPLv2 `LICENSE` file in this directory and are intentionally licensed separately from the BSL `LICENSE` file at the root of this repository. * Adding explicit MPL license for sub-package This directory and its subdirectories (packages) contain files licensed with the MPLv2 `LICENSE` file in this directory and are intentionally licensed separately from the BSL `LICENSE` file at the root of this repository. * Updating the license from MPL to Business Source License Going forward, this project will be licensed under the Business Source License v1.1. Please see our blog post for more details at https://hashi.co/bsl-blog, FAQ at www.hashicorp.com/licensing-faq, and details of the license at www.hashicorp.com/bsl. * Update copyright file headers to BUS-1.1 * Rerun make gen This will pick up the last of the license changes * Revert "Rerun make gen" This reverts commit `dbe0968bff`. * Remove copywrite from generation script The current version of copywrite is not sophisticated enough to only apply the copywrite changes to certain subdirectories, so to avoid accidentally relicensing our api and sdk modules, we will stop running the copywrite script until such time that it can do the right thing. * License protobuf API as MPL The protobuf API files are used to generate the SDK, since we want the SDK to be MPL, the protobuf files must also be MPL. This extends to all protobuf files whose sources end up in the SDK directory, including: - internal/proto/controller/api - internal/proto/controller/custom_options - internal/proto/plugin It also includes the generated service directory in internal/gen/controller/api/services, since they are generated from the protobuf sources used for the SDK. * Change website license file name This makes the naming scheme consistent with the rest of the repository. * Add note on licensing to README * Set copywrite license to BUSL * Revert "Add note on licensing to README" This reverts commit `4d865a91a7`. --------- Co-authored-by: hashicorp-copywrite[bot] <110428419+hashicorp-copywrite[bot]@users.noreply.github.com> Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	3 years ago
Mark Collao	75b4234668	chore: prefer gosec for semgrep rule and turn on codeql (#3418 )	3 years ago
Mark Collao	7d69db7854	fix: disable osv until errors are investigated	3 years ago
Mark Collao	7f96be9033	fix: disabling codeql until larger workers are avail	3 years ago
Mark Collao	5e3244a2e5	add security-scan workflow (#2945 ) * add security-scan workflow * remove uneeded branch; adopt .go-version * fix bad yaml * fix random newlines * add copy	3 years ago

7 Commits (c2bc19c71fac7c3ccf106b3cdf0c19fb7ecf899d)