From cdb6d5a3b767dfd32f31f99bf64189527f188dba Mon Sep 17 00:00:00 2001 From: dfeldick Date: Fri, 31 Jan 2025 10:28:22 -0700 Subject: [PATCH 1/2] APIGOV-29656 - changes for SSG --- .gitlab-ci.yml | 6 +++--- .security-profile-latest.json | 17 +++++++++++++++++ 2 files changed, 20 insertions(+), 3 deletions(-) create mode 100644 .security-profile-latest.json diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 5ff4d55..de1e8dd 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -41,14 +41,14 @@ include: ref: master file: "/.gitlab-ci-sonar.yml" - project: "apigov/beano_cicd" - ref: $BEANO_CICD_BLUE + ref: $BEANO_CICD_GREEN # the order of these include files is important file: - "/gitlabci/variables.yml" - "/gitlabci/restrictions.yml" - "/gitlabci/jobs.yml" - project: "scurity/gitlabci" - ref: $SCURITY_BLUE + ref: $SCURITY_GREEN file: - "/.gitlab-ci-fortify.yml" - "/.gitlab-ci-twistlock.yml" @@ -56,7 +56,7 @@ include: - "/.gitlab-ci-blackduck.yml" - "/.gitlab-ci-security.yml" - project: "apigov/beano_cicd" - ref: $BEANO_CICD_BLUE + ref: $BEANO_CICD_GREEN # the order of these include files is important file: - "/gitlabci/securityjobs.yml" diff --git a/.security-profile-latest.json b/.security-profile-latest.json new file mode 100644 index 0000000..b99c419 --- /dev/null +++ b/.security-profile-latest.json @@ -0,0 +1,17 @@ +{ + "project": "Amplify - APIC Apigee Agents", + "repo_url": "https://github.com/Axway/agents-apigee", + "security_guide": "https://docs.axway.com/bundle/axway_resources/page/amplify_api_management_platform_security_white_paper.html", + "requirements": { + "fortify": false, + "irius-risk": false, + "pentest": false, + "twistlock": false, + "blackduck": true, + "third-party-policy-violation": false, + "appspider": false, + "insightvm": false + }, + "suppressions": [ + ] +} From 5901f0812a2ed40eb17baa73903291313a52eba9 Mon Sep 17 00:00:00 2001 From: dfeldick Date: Fri, 31 Jan 2025 10:37:09 -0700 Subject: [PATCH 2/2] APIGOV-29656 - fix job rules --- .gitlab-ci.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index de1e8dd..2ee299f 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -72,7 +72,7 @@ stages: twistlock-discovery: rules: - - !reference [.mirror-branch-security-rules, rules] + - !reference [.beano-security-snapshot-rules, rules] before_script: - apk --no-cache update && apk add make - cd discovery && make docker-build @@ -82,7 +82,7 @@ twistlock-discovery: twistlock-traceability: rules: - - !reference [.mirror-branch-security-rules, rules] + - !reference [.beano-security-snapshot-rules, rules] before_script: - apk --no-cache update && apk add make - cd traceability && make docker-build