@catladder/cli 0.0.0-next-6916db3c → 0.0.0-next-704ed9ba

package/includes/envrc

@@ -1,5 +1,5 @@
 # adjust this file to your needs
-# find a current recommended version here: https://git.panter.ch/panter/catladder2/-/blob/master/includes/envrc
+# find a current recommended version here: https://github.com/panter/catladder/blob/main/apps/cli/includes/envrc
 
 # if catladder is available, invoke that
 if hash catladder 2>/dev/null; then

package/package.json

@@ -2,12 +2,12 @@
   "name": "@catladder/cli",
   "description": "Panter cli tool for cloud CI/CD and DevOps",
   "author": "Marco Wettstein <maw@panter.ch>",
-  "homepage": "https://catladder.git.panter.biz/catladder/docs",
-  "bugs": "https://git.panter.ch/catladder/catladder/issues",
-  "readme": "https://git.panter.ch/catladder/catladder/-/blob/main/cli/README.md",
+  "homepage": "https://panter.github.io/catladder/docs",
+  "bugs": "https://github.com/panter/catladder/issues",
+  "readme": "https://github.com/panter/catladder/blob/main/apps/cli/README.md",
   "repository": {
     "type": "git",
-    "url": "git+https://git.panter.ch/catladder/catladder.git",
+    "url": "git+https://github.com/panter/catladder.git",
     "directory": "apps/cli"
   },
   "keywords": [
@@ -53,7 +53,7 @@
     }
   ],
   "license": "MIT",
-  "version": "0.0.0-next-6916db3c",
+  "version": "0.0.0-next-704ed9ba",
   "scripts": {
     "lint": "eslint \"src/**/*.ts\"",
     "lint:fix": "eslint \"src/**/*.ts\" --fix",

package/src/security/topics.json

@@ -17,67 +17,67 @@
   {
     "description": "No sensitive information (passwords, keys, user data, ...) is logged or traced",
     "responsibles": 1,
-    "more": "[Logging guide](https://www.notion.so/panterch/Long-story-logging-022722bb878f4724ae5b49e17667b630?pvs=4#9e5a36b7158a4953b73ec6a345bd8989), [Tracing guide](https://www.notion.so/panterch/Long-story-tracing-d8a9ec1ac2ff4fa78cefa8991233224e?pvs=4#535121b5bf9741fbaf8654b4b64d879d)"
+    "more": ""
   },
   {
     "description": "Passwords are stored hashed with salt and salt is not stored in the repository",
     "responsibles": 1,
-    "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/hash.md)"
+    "more": ""
   },
   {
     "description": "Input that ends up in DOM is properly sanitized",
     "responsibles": 1,
-    "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/xss.md)"
+    "more": ""
   },
   {
     "description": "All user inputs have reasonable validations",
     "responsibles": 1,
-    "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/validation.md)"
+    "more": ""
   },
   {
     "description": "The app is not using cookies",
     "responsibles": 1,
-    "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/cookies.md)"
+    "more": ""
   },
   {
     "description": "The app is using cookies and cookies are properly configured",
     "responsibles": 1,
-    "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/cookies.md)"
+    "more": ""
   },
   {
     "description": "The app uses JWT with a secret and the secret is not stored in the repository",
     "responsibles": 1,
-    "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/cookies.md)"
+    "more": ""
   },
   {
     "description": "Authorization and user roles (RBAC) were reviewed thoroughly",
     "responsibles": 2,
-    "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/authorization.md)"
+    "more": ""
   },
   {
     "description": "CORS headers do not use `*`",
     "responsibles": 1,
-    "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/cors.md)"
+    "more": ""
   },
   {
     "description": "CSP headers are properly configured (no `unsafe-inline` or `unsafe-eval`)",
     "responsibles": 1,
-    "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/csp.md)"
+    "more": ""
   },
   {
     "description": "DoS defense mechanism is implemented",
     "responsibles": 1,
-    "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/dos.md)"
+    "more": ""
   },
   {
     "description": "YAML/XML parsing is not used or used YAML/XML parsers have disabled DTD",
     "responsibles": 1,
-    "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/dos.md)"
+    "more": ""
   },
   {
     "description": "The app implements CSRF prevention",
     "responsibles": 1,
-    "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/csrf.md)"
+    "more": ""
   },
   {
     "description": "The app has a rate limitter",
@@ -87,12 +87,12 @@
   {
     "description": "The app has disabled GraphQL introspection and schema registry",
     "responsibles": 1,
-    "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/graphql.md)"
+    "more": ""
   },
   {
     "description": "The app has set GraphQL complexity query limits",
     "responsibles": 1,
-    "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/graphql.md)"
+    "more": ""
   },
   {
     "description": "`sitemap.xml` does not leak any routes with sensitive data",

package/dist/bundles/runner-images/jobs-testing-chrome/Dockerfile

@@ -1,15 +0,0 @@
-# syntax = docker.io/devthefuture/dockerfile-x
-
-INCLUDE ./jobs-default/Dockerfile
-
-# add sources
-# Google Chrome (for testing purposes)
-RUN wget -q -O - https://dl-ssl.google.com/linux/linux_signing_key.pub | apt-key add - && \
-    sh -c 'echo "deb [arch=amd64] http://dl.google.com/linux/chrome/deb/ stable main" >> /etc/apt/sources.list.d/google.list'
-
-# install some sources
-# not sure if libxss1 is required
-RUN apt-get update && apt-get install -y \
-    libxss1 \ 
-    google-chrome-stable
-

package/dist/runner-images/jobs-testing-chrome/Dockerfile

@@ -1,15 +0,0 @@
-# syntax = docker.io/devthefuture/dockerfile-x
-
-INCLUDE ./jobs-default/Dockerfile
-
-# add sources
-# Google Chrome (for testing purposes)
-RUN wget -q -O - https://dl-ssl.google.com/linux/linux_signing_key.pub | apt-key add - && \
-    sh -c 'echo "deb [arch=amd64] http://dl.google.com/linux/chrome/deb/ stable main" >> /etc/apt/sources.list.d/google.list'
-
-# install some sources
-# not sure if libxss1 is required
-RUN apt-get update && apt-get install -y \
-    libxss1 \ 
-    google-chrome-stable
-