diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index 3ab93ab10..000000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,48 +0,0 @@ -# To get started with Dependabot version updates, you'll need to specify which -# package ecosystems to update and where the package manifests are located. -# Please see the documentation for all configuration options: -# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates - -version: 2 -updates: - - package-ecosystem: "github-actions" - directory: "/" - schedule: - interval: "daily" - - package-ecosystem: "npm" # See documentation for possible values - directory: "/wrongsecrets-balancer/" # Location of package manifests - open-pull-requests-limit: 15 - schedule: - interval: "monthly" - - package-ecosystem: "npm" # See documentation for possible values - directory: "/wrongsecrets-balancer/ui" # Location of package manifests - open-pull-requests-limit: 16 - schedule: - interval: "monthly" - # check our npm for dev - - package-ecosystem: "npm" - directory: "/" - open-pull-requests-limit: 15 - schedule: - interval: "monthly" - - package-ecosystem: "npm" # See documentation for possible values - directory: "/cleaner" # Location of package manifests - open-pull-requests-limit: 15 - schedule: - interval: "monthly" - - package-ecosystem: "docker" - directory: "/wrongsecrets-balancer" - schedule: - interval: "monthly" - - package-ecosystem: "terraform" - directory: "/aws" - schedule: - interval: "monthly" - - package-ecosystem: "terraform" - directory: "/azure" - schedule: - interval: "monthly" - - package-ecosystem: "terraform" - directory: "/gcp" - schedule: - interval: "monthly" diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index ab7f6811a..5eb497857 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -1,4 +1,17 @@ +ci: + autofix_commit_msg: | + [pre-commit.ci] auto fixes from pre-commit.com hooks + autofix_prs: false # managed in the action step + autoupdate_branch: "" + autoupdate_commit_msg: "[pre-commit.ci] pre-commit autoupdate" + autoupdate_schedule: weekly + skip: [] + submodules: false repos: + - repo: https://github.com/renovatebot/pre-commit-hooks + rev: 39.17.1 + hooks: + - id: renovate-config-validator - repo: https://github.com/pre-commit/pre-commit-hooks rev: v4.6.0 hooks: diff --git a/aws/.terraform-docs.yml b/aws/.terraform-docs.yml new file mode 100644 index 000000000..93e4fcb54 --- /dev/null +++ b/aws/.terraform-docs.yml @@ -0,0 +1,54 @@ +formatter: "" # this is required + +version: "" + +header-from: main.tf +footer-from: "" + +recursive: + enabled: true + path: shared-state + include-main: true + +sections: + hide: + - requirements + - providers + - modules + show: [] + + hide-all: false # deprecated in v0.13.0, removed in v0.15.0 + show-all: true # deprecated in v0.13.0, removed in v0.15.0 + +content: "" + +output: + file: README.md + mode: inject + template: |- + + {{ .Content }} + + +output-values: + enabled: false + from: "" + +sort: + enabled: true + by: name + +settings: + anchor: true + color: true + default: true + description: false + escape: true + hide-empty: false + html: true + indent: 2 + lockfile: true + read-comments: true + required: true + sensitive: true + type: true diff --git a/aws/README.md b/aws/README.md index 3313a9197..f84821c1e 100644 --- a/aws/README.md +++ b/aws/README.md @@ -138,36 +138,11 @@ Note that you might have to do some manual cleanups after that. The documentation below is auto-generated to give insight on what's created via Terraform. -## Requirements - -| Name | Version | -|------|---------| -| [terraform](#requirement\_terraform) | ~> 1.1 | -| [aws](#requirement\_aws) | ~> 5.0 | -| [http](#requirement\_http) | ~> 3.1 | -| [random](#requirement\_random) | ~> 3.0 | - -## Providers - -| Name | Version | -|------|---------| -| [aws](#provider\_aws) | 5.70.0 | -| [http](#provider\_http) | 3.4.5 | -| [random](#provider\_random) | 3.6.3 | - -## Modules - -| Name | Source | Version | -|------|--------|---------| -| [acm\_balancer](#module\_acm\_balancer) | terraform-aws-modules/acm/aws | n/a | -| [acm\_ctfd](#module\_acm\_ctfd) | terraform-aws-modules/acm/aws | n/a | -| [cluster\_autoscaler\_irsa\_role](#module\_cluster\_autoscaler\_irsa\_role) | terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks | ~> 5.46 | -| [ebs\_csi\_irsa\_role](#module\_ebs\_csi\_irsa\_role) | terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks | ~> 5.46 | -| [eks](#module\_eks) | terraform-aws-modules/eks/aws | 20.24.2 | -| [external\_dns\_irsa\_role](#module\_external\_dns\_irsa\_role) | terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks | ~> 5.46 | -| [load\_balancer\_controller\_irsa\_role](#module\_load\_balancer\_controller\_irsa\_role) | terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks | ~> 5.46 | -| [vpc](#module\_vpc) | terraform-aws-modules/vpc/aws | ~> 5.13.0 | +README.md updated successfully +shared-state/.terraform/README.md updated successfully + + ## Resources | Name | Type | @@ -240,4 +215,4 @@ The documentation below is auto-generated to give insight on what's created via | [load\_balancer\_controller\_role\_arn](#output\_load\_balancer\_controller\_role\_arn) | Load balancer controller role arn | | [secrets\_manager\_secret\_name](#output\_secrets\_manager\_secret\_name) | The name of the secrets manager secret | | [state\_bucket\_name](#output\_state\_bucket\_name) | Terraform s3 state bucket name | - + diff --git a/aws/shared-state/README.md b/aws/shared-state/README.md deleted file mode 100644 index 5894a5ebb..000000000 --- a/aws/shared-state/README.md +++ /dev/null @@ -1,41 +0,0 @@ -# Terraform documentation -The documentation below is auto-generated to give insight on what's created via Terraform. - - -## Requirements - -| Name | Version | -|------|---------| -| [terraform](#requirement\_terraform) | ~> 1.1 | -| [aws](#requirement\_aws) | ~> 5.0 | - -## Providers - -| Name | Version | -|------|---------| -| [aws](#provider\_aws) | 5.70.0 | - -## Modules - -No modules. - -## Resources - -| Name | Type | -|------|------| -| [aws_s3_bucket.state](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket) | resource | -| [aws_s3_bucket_server_side_encryption_configuration.encryption](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_server_side_encryption_configuration) | resource | - -## Inputs - -| Name | Description | Type | Default | Required | -|------|-------------|------|---------|:--------:| -| [region](#input\_region) | The AWS region to use | `string` | `"eu-west-1"` | no | - -## Outputs - -| Name | Description | -|------|-------------| -| [s3\_bucket\_arn](#output\_s3\_bucket\_arn) | Name of the terraform state bucket | -| [s3\_bucket\_name](#output\_s3\_bucket\_name) | Name of the terraform state bucket | - diff --git a/azure/.terraform-docs.yml b/azure/.terraform-docs.yml new file mode 100644 index 000000000..93e4fcb54 --- /dev/null +++ b/azure/.terraform-docs.yml @@ -0,0 +1,54 @@ +formatter: "" # this is required + +version: "" + +header-from: main.tf +footer-from: "" + +recursive: + enabled: true + path: shared-state + include-main: true + +sections: + hide: + - requirements + - providers + - modules + show: [] + + hide-all: false # deprecated in v0.13.0, removed in v0.15.0 + show-all: true # deprecated in v0.13.0, removed in v0.15.0 + +content: "" + +output: + file: README.md + mode: inject + template: |- + + {{ .Content }} + + +output-values: + enabled: false + from: "" + +sort: + enabled: true + by: name + +settings: + anchor: true + color: true + default: true + description: false + escape: true + hide-empty: false + html: true + indent: 2 + lockfile: true + read-comments: true + required: true + sensitive: true + type: true diff --git a/azure/README.md b/azure/README.md index ed6efdd87..aa9fdc7c1 100644 --- a/azure/README.md +++ b/azure/README.md @@ -146,27 +146,10 @@ Note that you might have to do some manual cleanups after that. The documentation below is auto-generated to give insight on what's created via Terraform. -## Requirements - -| Name | Version | -|------|---------| -| [terraform](#requirement\_terraform) | ~> 1.1 | -| [azurerm](#requirement\_azurerm) | ~> 4.3.0 | -| [http](#requirement\_http) | ~> 3.4.0 | -| [random](#requirement\_random) | ~> 3.6.0 | - -## Providers - -| Name | Version | -|------|---------| -| [azurerm](#provider\_azurerm) | 4.3.0 | -| [http](#provider\_http) | 3.4.5 | -| [random](#provider\_random) | 3.6.3 | - -## Modules - -No modules. +README.md updated successfully + + ## Resources | Name | Type | @@ -213,4 +196,4 @@ No modules. | [tenant\_id](#output\_tenant\_id) | Azure tenant ID | | [vault\_name](#output\_vault\_name) | Vault name | | [vault\_uri](#output\_vault\_uri) | Vault URI | - + diff --git a/azure/shared-state/README.md b/azure/shared-state/README.md deleted file mode 100644 index edca17180..000000000 --- a/azure/shared-state/README.md +++ /dev/null @@ -1,45 +0,0 @@ -# Terraform documentation -The documentation below is auto-generated to give insight on what's created via Terraform. - - -## Requirements - -| Name | Version | -|------|---------| -| [terraform](#requirement\_terraform) | ~> 1.1 | -| [azurerm](#requirement\_azurerm) | ~> 3.0 | -| [random](#requirement\_random) | ~> 3.0 | - -## Providers - -| Name | Version | -|------|---------| -| [azurerm](#provider\_azurerm) | 3.69.0 | -| [random](#provider\_random) | 3.5.1 | - -## Modules - -No modules. - -## Resources - -| Name | Type | -|------|------| -| [azurerm_resource_group.default](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/resource_group) | resource | -| [azurerm_storage_account.account](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/storage_account) | resource | -| [azurerm_storage_container.blob](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/storage_container) | resource | -| [random_integer.suffix](https://registry.terraform.io/providers/hashicorp/random/latest/docs/resources/integer) | resource | -| [random_string.suffix](https://registry.terraform.io/providers/hashicorp/random/latest/docs/resources/string) | resource | - -## Inputs - -| Name | Description | Type | Default | Required | -|------|-------------|------|---------|:--------:| -| [region](#input\_region) | The Azure region to use | `string` | `"East US"` | no | - -## Outputs - -| Name | Description | -|------|-------------| -| [storage\_account\_name](#output\_storage\_account\_name) | The generated storage account name | - diff --git a/gcp/.terraform-docs.yml b/gcp/.terraform-docs.yml new file mode 100644 index 000000000..93e4fcb54 --- /dev/null +++ b/gcp/.terraform-docs.yml @@ -0,0 +1,54 @@ +formatter: "" # this is required + +version: "" + +header-from: main.tf +footer-from: "" + +recursive: + enabled: true + path: shared-state + include-main: true + +sections: + hide: + - requirements + - providers + - modules + show: [] + + hide-all: false # deprecated in v0.13.0, removed in v0.15.0 + show-all: true # deprecated in v0.13.0, removed in v0.15.0 + +content: "" + +output: + file: README.md + mode: inject + template: |- + + {{ .Content }} + + +output-values: + enabled: false + from: "" + +sort: + enabled: true + by: name + +settings: + anchor: true + color: true + default: true + description: false + escape: true + hide-empty: false + html: true + indent: 2 + lockfile: true + read-comments: true + required: true + sensitive: true + type: true diff --git a/gcp/README.md b/gcp/README.md index 96f4e973d..feb71ccc3 100644 --- a/gcp/README.md +++ b/gcp/README.md @@ -137,29 +137,10 @@ Note that you might have to do some manual cleanups after that. The documentation below is auto-generated to give insight on what's created via Terraform. -## Requirements - -| Name | Version | -|------|---------| -| [terraform](#requirement\_terraform) | ~> 1.1 | -| [google](#requirement\_google) | ~> 6.5.0 | -| [google-beta](#requirement\_google-beta) | ~> 6.5.0 | -| [http](#requirement\_http) | ~> 3.4.0 | -| [random](#requirement\_random) | ~> 3.5.1 | - -## Providers - -| Name | Version | -|------|---------| -| [google](#provider\_google) | 6.5.0 | -| [google-beta](#provider\_google-beta) | 6.5.0 | -| [http](#provider\_http) | 3.4.5 | -| [random](#provider\_random) | 3.5.1 | - -## Modules - -No modules. +README.md updated successfully + + ## Resources | Name | Type | @@ -203,4 +184,4 @@ No modules. | [kubernetes\_cluster\_name](#output\_kubernetes\_cluster\_name) | GKE Cluster Name | | [project\_id](#output\_project\_id) | GCloud Project ID | | [region](#output\_region) | GCloud Region | - + diff --git a/gcp/shared-state/README.md b/gcp/shared-state/README.md deleted file mode 100644 index 0501a6c69..000000000 --- a/gcp/shared-state/README.md +++ /dev/null @@ -1,43 +0,0 @@ -# Terraform documentation -The documentation below is auto-generated to give insight on what's created via Terraform. - - -## Requirements - -| Name | Version | -|------|---------| -| [terraform](#requirement\_terraform) | ~> 1.1 | -| [google](#requirement\_google) | ~> 4.1 | -| [random](#requirement\_random) | ~> 3.0 | - -## Providers - -| Name | Version | -|------|---------| -| [google](#provider\_google) | 4.83.0 | -| [random](#provider\_random) | 3.5.1 | - -## Modules - -No modules. - -## Resources - -| Name | Type | -|------|------| -| [google_storage_bucket.state_bucket](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/storage_bucket) | resource | -| [random_id.suffix](https://registry.terraform.io/providers/hashicorp/random/latest/docs/resources/id) | resource | - -## Inputs - -| Name | Description | Type | Default | Required | -|------|-------------|------|---------|:--------:| -| [project\_id](#input\_project\_id) | The GCP project id to use | `string` | `"owasp-wrongsecrets"` | no | -| [region](#input\_region) | The GCP region to use | `string` | `"europe-west4"` | no | - -## Outputs - -| Name | Description | -|------|-------------| -| [bucket](#output\_bucket) | Terraform backend storage bucket | - diff --git a/helm/wrongsecrets-ctf-party/README.md b/helm/wrongsecrets-ctf-party/README.md index 43b770008..aeccf2654 100644 --- a/helm/wrongsecrets-ctf-party/README.md +++ b/helm/wrongsecrets-ctf-party/README.md @@ -216,4 +216,4 @@ Run Multi User "Capture the Flags" or Security Trainings with OWASP Wrongsecrets | wrongsecretsCleanup.tolerations | list | `[]` | Optional Configure kubernetes toleration for the wrongsecretsCleanup Job (see: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/) | ---------------------------------------------- -Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0) +Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2) diff --git a/renovate.json b/renovate.json index 86c870091..4abd51397 100644 --- a/renovate.json +++ b/renovate.json @@ -1,123 +1,79 @@ { - "$schema": "https://docs.renovatebot.com/renovate-schema.json", - "reviewers": [ - "commjoen", - "bendehaan" - ], - "schedule": [ - "* * 1,15 * *" - ], - "extends": [ - "config:recommended", - ":enablePreCommit" - ], - "labels": [ - "renovate", - "dependencies" - ], - "customManagers": [ - { - "customType": "regex", - "fileMatch": ".github/workflows/pre-commit.yml", - "depNameTemplate": "terraform-docs/terraform-docs", - "matchStrings": [ - "TF_DOCS_VERSION=\"(?.*?)\"" - ], - "datasourceTemplate": "github-releases" - }, - { - "customType": "regex", - "fileMatch": ".github/workflows/pre-commit.yml", - "depNameTemplate": "aquasecurity/tfsec", - "matchStrings": [ - "TFSEC_VERSION=\"(?.*?)\"" - ], - "datasourceTemplate": "github-releases" - }, - { - "customType": "regex", - "fileMatch": ".github/workflows/pre-commit.yml", - "depNameTemplate": "terraform-linters/tflint", - "matchStrings": [ - "TFLINT_VERSION=\"(?.*?)\"" - ], - "datasourceTemplate": "github-releases" - }, - { - "customType": "regex", - "fileMatch": ".github/scripts/docker-create.sh", - "depNameTemplate": "OWASP/wrongsecrets-binaries", - "matchStrings": [ - "BINARY_VERSION=\"(?.*?)\"" - ], - "datasourceTemplate": "github-releases" - }, - { - "customType": "regex", - "fileMatch": "aws/k8s-aws-alb-script.sh", - "depNameTemplate": "kubernetes-sigs/aws-alb-ingress-controller", - "matchStrings": [ - "LBC_VERSION=\"(?.*?)\"" - ], - "datasourceTemplate": "github-releases" - } - ], - "packageRules": [ - { - "groupName": "eslint", - "enabled": true, - "matchPackageNames": [ - "/^eslint/" - ] - }, - { - "groupName": "go", - "matchDatasources": [ - "go" - ], - "enabled": true - }, - { - "groupName": "pre-commit", - "matchFileNames": [ - ".pre-commit-config.yaml" - ], - "enabled": true - }, - { - "groupName": "terraform-aws", - "matchDatasources": [ - "terraform-provider", - "terraform-module" - ], - "enabled": true, - "matchPackageNames": [ - "/aws/", - "/terraform-aws-modules/.*/" - ] - }, - { - "groupName": "terraform-azure", - "matchDatasources": [ - "terraform-provider", - "terraform-module" - ], - "enabled": true, - "matchPackageNames": [ - "/azurerm/" - ] - }, - { - "groupName": "terraform-gcp", - "matchDatasources": [ - "terraform-provider", - "terraform-module" - ], - "enabled": true, - "matchPackageNames": [ - "/google/", - "/google-beta/" - ] - } - ] + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "reviewers": ["commjoen", "bendehaan"], + "schedule": ["* * 1,15 * *"], + "extends": ["config:recommended", ":enablePreCommit"], + "labels": ["renovate", "dependencies"], + "customManagers": [ + { + "customType": "regex", + "fileMatch": ".github/workflows/pre-commit.yml", + "depNameTemplate": "terraform-docs/terraform-docs", + "matchStrings": ["TF_DOCS_VERSION=\"(?.*?)\""], + "datasourceTemplate": "github-releases" + }, + { + "customType": "regex", + "fileMatch": ".github/workflows/pre-commit.yml", + "depNameTemplate": "aquasecurity/tfsec", + "matchStrings": ["TFSEC_VERSION=\"(?.*?)\""], + "datasourceTemplate": "github-releases" + }, + { + "customType": "regex", + "fileMatch": ".github/workflows/pre-commit.yml", + "depNameTemplate": "terraform-linters/tflint", + "matchStrings": ["TFLINT_VERSION=\"(?.*?)\""], + "datasourceTemplate": "github-releases" + }, + { + "customType": "regex", + "fileMatch": ".github/workflows/pre-commit.yml", + "depNameTemplate": "norwoodj/helm-docs", + "matchStrings": ["HELM_DOCS_VERSION=\"(?.*?)\""], + "datasourceTemplate": "github-releases" + }, + { + "customType": "regex", + "fileMatch": "aws/k8s-aws-alb-script.sh", + "depNameTemplate": "kubernetes-sigs/aws-alb-ingress-controller", + "matchStrings": ["LBC_VERSION=\"(?.*?)\""], + "datasourceTemplate": "github-releases" + } + ], + "packageRules": [ + { + "groupName": "eslint", + "enabled": true, + "matchPackageNames": ["/^eslint/"] + }, + { + "groupName": "go", + "matchDatasources": ["go"], + "enabled": true + }, + { + "groupName": "pre-commit", + "matchFileNames": [".pre-commit-config.yaml"], + "enabled": true + }, + { + "groupName": "terraform-aws", + "matchDatasources": ["terraform-provider", "terraform-module"], + "enabled": true, + "matchPackageNames": ["/aws/", "/terraform-aws-modules/.*/"] + }, + { + "groupName": "terraform-azure", + "matchDatasources": ["terraform-provider", "terraform-module"], + "enabled": true, + "matchPackageNames": ["/azurerm/"] + }, + { + "groupName": "terraform-gcp", + "matchDatasources": ["terraform-provider", "terraform-module"], + "enabled": true, + "matchPackageNames": ["/google/", "/google-beta/"] + } + ] }