Skip to content

Comments

Enforce dependency review by kibana-security workflow#219262

Merged
elena-shostak merged 4 commits intoelastic:mainfrom
elena-shostak:enforce-dependency-review
May 2, 2025
Merged

Enforce dependency review by kibana-security workflow#219262
elena-shostak merged 4 commits intoelastic:mainfrom
elena-shostak:enforce-dependency-review

Conversation

@elena-shostak
Copy link
Contributor

Summary

This PR adds workflow to run script that enforces dependency review by kibana-security team.

@elena-shostak elena-shostak added Team:Security Platform Security: Auth, Users, Roles, Spaces, Audit Logging, etc t// release_note:skip Skip the PR/issue when compiling release notes backport:skip This PR does not require backporting labels Apr 25, 2025
@elena-shostak elena-shostak marked this pull request as ready for review April 25, 2025 15:14
@elena-shostak elena-shostak requested review from a team as code owners April 25, 2025 15:14
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-security (Team:Security)

@elasticmachine
Copy link
Contributor

💚 Build Succeeded

Metrics [docs]

✅ unchanged

Co-authored-by: Brad White <Ikuni17@users.noreply.github.com>
Copy link
Contributor

@azasypkin azasypkin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks! I assume this PR should wait until we merge enforce-dependency-review.js

- name: Checkout kibana-operations
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
repository: 'elastic/kibana-operations'
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

note: We're referring to the private repo from this public workflow. It makes me wonder if we should eventually move enforce-dependency-review.js to the Kibana repo instead, but it's up to @elastic/kibana-operations 🤔 Not a blocker though, just thinking aloud.

@prodsecmachine
Copy link
Collaborator

prodsecmachine commented May 1, 2025

🎉 Snyk checks have passed. No issues have been found so far.

security/snyk check is complete. No issues have been found. (View Details)

license/snyk check is complete. No issues have been found. (View Details)

@elena-shostak elena-shostak merged commit f74abad into elastic:main May 2, 2025
9 checks passed
kapral18 added a commit to kapral18/kibana that referenced this pull request May 4, 2025
…ends-crash

* main: (111 commits)
  [ResponseOps][Rules] Cases action title length too long (elastic#219226)
  [main] Sync bundled packages with Package Storage (elastic#219839)
  Fix ignored dynamic templates (elastic#219875)
  Enforce dependency review by kibana-security workflow (elastic#219262)
  [Security Solution] [Detections] Removes tech preview text from eql seq suppression ui (elastic#219870)
  [Security Solution] Fix alerts table potentially not applying alert assignees (elastic#219460)
  fix(slo): alert deletion (elastic#219876)
  [AI4DSOC] fix styling to address cutoff when screen is narrow (elastic#219306)
  [Security Solution][Endpoint] Response action create and history log API updates in of space awareness (elastic#218674)
  Update publish_oas_docs.sh to deploy Kibana Serverless API docs (elastic#219867)
  feat(slo): lock resource installation (elastic#219747)
  [AI4DSOC] Alert flyout code cleanup (elastic#219810)
  [fleet] fixing `isAgentlessDefault` config usage and readability improvements to `isAgentlessSetupDefault` (elastic#219423)
  feat(slo): Bulk delete UI (elastic#219634)
  m1 demo prep (elastic#219588)
  [Security Solution] Replace sourcerer in EQL tab with dataview picker (elastic#218897)
  [AI4DSOC] Attack discovery widget follow up follow up (elastic#219849)
  [AI Assistant] Fix some OpenAI models not accepting temperature for Inference service (elastic#218887)
  Update dependency msw to ~2.7.5 (main) (elastic#219289)
  Use new client URLs in doc link service (elastic#219600)
  ...
akowalska622 pushed a commit to akowalska622/kibana that referenced this pull request May 29, 2025
## Summary

This PR adds workflow to run script that enforces dependency review by
`kibana-security` team.

---------

Co-authored-by: Brad White <Ikuni17@users.noreply.github.com>
qn895 pushed a commit to qn895/kibana that referenced this pull request Jun 3, 2025
## Summary

This PR adds workflow to run script that enforces dependency review by
`kibana-security` team.

---------

Co-authored-by: Brad White <Ikuni17@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport:skip This PR does not require backporting release_note:skip Skip the PR/issue when compiling release notes Team:Security Platform Security: Auth, Users, Roles, Spaces, Audit Logging, etc t// v9.1.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants