bitwarden_workflow_linter 0.5.7__tar.gz → 0.7.0__tar.gz

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.0}/.github/workflows/enforce-labels.yml

@@ -9,7 +9,7 @@ jobs:
     uses: bitwarden/gh-actions/.github/workflows/_enforce-labels.yml@main
 
   enforce-version-label:
-    if: "!(contains(github.event.pull_request.labels.*.name, 'version:major') || contains(github.event.pull_request.labels.*.name, 'version:minor') || contains(github.event.pull_request.labels.*.name, 'version:patch')) || contains(github.event.pull_request.labels.*.name, 'version:skip')"
+    if: "!(contains(github.event.pull_request.labels.*.name, 'version:major') || contains(github.event.pull_request.labels.*.name, 'version:minor') || contains(github.event.pull_request.labels.*.name, 'version:patch') || contains(github.event.pull_request.labels.*.name, 'version:skip'))"
     name: Enforce version label
     runs-on: ubuntu-22.04
 

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bitwarden_workflow_linter
-Version: 0.5.7
+Version: 0.7.0
 Summary: Custom GitHub Action Workflow Linter
 Project-URL: Homepage, https://github.com/bitwarden/workflow-linter
 Project-URL: Issues, https://github.com/bitwarden/workflow-linter/issues
@@ -60,12 +60,20 @@ the below and create a `settings.yaml` in the directory that `bwwl` will be runn
 
 ```yaml
 enabled_rules:
-    - bitwarden_workflow_linter.rules.name_exists.RuleNameExists
-    - bitwarden_workflow_linter.rules.name_capitalized.RuleNameCapitalized
-    - bitwarden_workflow_linter.rules.pinned_job_runner.RuleJobRunnerVersionPinned
-    - bitwarden_workflow_linter.rules.job_environment_prefix.RuleJobEnvironmentPrefix
-    - bitwarden_workflow_linter.rules.step_pinned.RuleStepUsesPinned
-    - bitwarden_workflow_linter.rules.underscore_outputs.RuleUnderscoreOutputs
+  - id: bitwarden_workflow_linter.rules.name_exists.RuleNameExists
+    level: error
+  - id: bitwarden_workflow_linter.rules.name_capitalized.RuleNameCapitalized
+    level: error
+  - id: bitwarden_workflow_linter.rules.pinned_job_runner.RuleJobRunnerVersionPinned
+    level: error
+  - id: bitwarden_workflow_linter.rules.job_environment_prefix.RuleJobEnvironmentPrefix
+    level: error
+  - id: bitwarden_workflow_linter.rules.step_pinned.RuleStepUsesPinned
+    level: error
+  - id: bitwarden_workflow_linter.rules.underscore_outputs.RuleUnderscoreOutputs
+    level: warning
+  - id: bitwarden_workflow_linter.rules.run_actionlint.RunActionlint
+    level: warning
 
 approved_actions_path: default_actions.json
 ```
@@ -151,9 +159,9 @@ from ..utils import LintLevels, Settings
 
 
 class RuleJobNameExists(Rule):
-    def __init__(self, settings: Settings = None) -> None:
+    def __init__(self, settings: Settings = None, lint_level: Optional[LintLevels] = LintLevels.ERROR) -> None:
         self.message = "name must exist"
-        self.on_fail: LintLevels = LintLevels.ERROR
+        self.on_fail: LintLevels = lint_level
         self.compatibility: List[Union[Workflow, Job, Step]] = [Job]
         self.settings: Settings = settings
 

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.0}/README.md

@@ -34,12 +34,20 @@ the below and create a `settings.yaml` in the directory that `bwwl` will be runn
 
 ```yaml
 enabled_rules:
-    - bitwarden_workflow_linter.rules.name_exists.RuleNameExists
-    - bitwarden_workflow_linter.rules.name_capitalized.RuleNameCapitalized
-    - bitwarden_workflow_linter.rules.pinned_job_runner.RuleJobRunnerVersionPinned
-    - bitwarden_workflow_linter.rules.job_environment_prefix.RuleJobEnvironmentPrefix
-    - bitwarden_workflow_linter.rules.step_pinned.RuleStepUsesPinned
-    - bitwarden_workflow_linter.rules.underscore_outputs.RuleUnderscoreOutputs
+  - id: bitwarden_workflow_linter.rules.name_exists.RuleNameExists
+    level: error
+  - id: bitwarden_workflow_linter.rules.name_capitalized.RuleNameCapitalized
+    level: error
+  - id: bitwarden_workflow_linter.rules.pinned_job_runner.RuleJobRunnerVersionPinned
+    level: error
+  - id: bitwarden_workflow_linter.rules.job_environment_prefix.RuleJobEnvironmentPrefix
+    level: error
+  - id: bitwarden_workflow_linter.rules.step_pinned.RuleStepUsesPinned
+    level: error
+  - id: bitwarden_workflow_linter.rules.underscore_outputs.RuleUnderscoreOutputs
+    level: warning
+  - id: bitwarden_workflow_linter.rules.run_actionlint.RunActionlint
+    level: warning
 
 approved_actions_path: default_actions.json
 ```
@@ -125,9 +133,9 @@ from ..utils import LintLevels, Settings
 
 
 class RuleJobNameExists(Rule):
-    def __init__(self, settings: Settings = None) -> None:
+    def __init__(self, settings: Settings = None, lint_level: Optional[LintLevels] = LintLevels.ERROR) -> None:
         self.message = "name must exist"
-        self.on_fail: LintLevels = LintLevels.ERROR
+        self.on_fail: LintLevels = lint_level
         self.compatibility: List[Union[Workflow, Job, Step]] = [Job]
         self.settings: Settings = settings
 

bitwarden_workflow_linter-0.7.0/settings.yaml

@@ -0,0 +1,21 @@
+enabled_rules:
+  - id: bitwarden_workflow_linter.rules.name_exists.RuleNameExists
+    level: error
+  - id: bitwarden_workflow_linter.rules.name_capitalized.RuleNameCapitalized
+    level: error
+  - id: bitwarden_workflow_linter.rules.pinned_job_runner.RuleJobRunnerVersionPinned
+    level: error
+  - id: bitwarden_workflow_linter.rules.job_environment_prefix.RuleJobEnvironmentPrefix
+    level: error
+#   - id: bitwarden_workflow_linter.rules.step_approved.RuleStepUsesApproved
+#     level: error
+  - id: bitwarden_workflow_linter.rules.step_pinned.RuleStepUsesPinned
+    level: error
+  - id: bitwarden_workflow_linter.rules.underscore_outputs.RuleUnderscoreOutputs
+    level: warning
+  - id: bitwarden_workflow_linter.rules.run_actionlint.RunActionlint
+    level: warning
+  - id: bitwarden_workflow_linter.rules.check_pr_target.RuleCheckPrTarget
+    level: warning
+
+approved_actions_path: default_actions.json

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.0}/src/bitwarden_workflow_linter/__about__.py

@@ -1,3 +1,3 @@
 """Metadata for Workflow Linter."""
 
-__version__ = "0.5.7"
+__version__ = "0.7.0"

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.0}/src/bitwarden_workflow_linter/default_actions.json

@@ -121,8 +121,8 @@
   },
   "actions/upload-artifact": {
     "name": "actions/upload-artifact",
-    "sha": "b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882",
-    "version": "v4.4.3"
+    "sha": "65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08",
+    "version": "v4.6.0"
   },
   "actions/upload-pages-artifact": {
     "name": "actions/upload-pages-artifact",
@@ -221,8 +221,8 @@
   },
   "docker/build-push-action": {
     "name": "docker/build-push-action",
-    "sha": "48aba3b46d1b1fec4febb7c5d0c644b249a11355",
-    "version": "v6.10.0"
+    "sha": "67a2d409c0a876cbe6b11854e3e25193efe4e62d",
+    "version": "v6.12.0"
   },
   "docker/login-action": {
     "name": "docker/login-action",
@@ -274,6 +274,11 @@
     "sha": "cc4fc85e6b35bafd578d5ffbc76a5518407e1af0",
     "version": "v4.2.1"
   },
+  "gradle/wrapper-validation-action": {
+    "name": "gradle/wrapper-validation-action",
+    "sha": "f9c9c575b8b21b6485636a91ffecd10e558c62f6",
+    "version": "v3.5.0"
+  },
   "hashicorp/setup-packer": {
     "name": "hashicorp/setup-packer",
     "sha": "1aa358be5cf73883762b302a3a03abd66e75b232",

bitwarden_workflow_linter-0.7.0/src/bitwarden_workflow_linter/default_settings.yaml

@@ -0,0 +1,21 @@
+enabled_rules:
+  - id: bitwarden_workflow_linter.rules.name_exists.RuleNameExists
+    level: error
+  - id: bitwarden_workflow_linter.rules.name_capitalized.RuleNameCapitalized
+    level: error
+  - id: bitwarden_workflow_linter.rules.pinned_job_runner.RuleJobRunnerVersionPinned
+    level: error
+  - id: bitwarden_workflow_linter.rules.job_environment_prefix.RuleJobEnvironmentPrefix
+    level: error
+#   - id: bitwarden_workflow_linter.rules.step_approved.RuleStepUsesApproved
+#     level: error
+  - id: bitwarden_workflow_linter.rules.step_pinned.RuleStepUsesPinned
+    level: error
+  - id: bitwarden_workflow_linter.rules.underscore_outputs.RuleUnderscoreOutputs
+    level: warning
+  - id: bitwarden_workflow_linter.rules.run_actionlint.RunActionlint
+    level: warning
+  - id: bitwarden_workflow_linter.rules.check_pr_target.RuleCheckPrTarget
+    level: warning
+
+approved_actions_path: default_actions.json

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.0}/src/bitwarden_workflow_linter/load.py

@@ -11,7 +11,7 @@ from .models.job import Job
 from .models.step import Step
 from .models.workflow import Workflow
 from .rule import Rule
-from .utils import Settings
+from .utils import Settings, LintLevels
 
 yaml = YAML()
 
@@ -127,13 +127,14 @@ class Rules:
         """
         # [TODO]: data resiliency
         for rule in settings.enabled_rules:
-            module_name = rule.split(".")
+            rule_id = rule["id"]
+            module_name = rule_id.split(".")
             module_name = ".".join(module_name[:-1])
-            rule_name = rule.split(".")[-1]
+            rule_name = rule_id.split(".")[-1]
 
             try:
                 rule_class = getattr(importlib.import_module(module_name), rule_name)
-                rule_inst = rule_class(settings=settings)
+                rule_inst = rule_class(settings=settings, lint_level=lint_level(rule["level"]))
 
                 if Workflow in rule_inst.compatibility:
                     self.workflow.append(rule_inst)
@@ -157,3 +158,21 @@ class Rules:
         for rule in self.step:
             print(f" - {type(rule).__name__}")
         print("========================\n")
+
+
+def lint_level(level: str) -> LintLevels:
+    """Convert a string to a LintLevels enum.
+
+    Args:
+      level:
+        The string representation of the LintLevels enum
+
+    Returns:
+      The LintLevels enum value
+    """
+    if level == "error":
+        return LintLevels.ERROR
+    elif level == "warning":
+        return LintLevels.WARNING
+    else:
+        return LintLevels.NONE

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.0}/src/bitwarden_workflow_linter/rules/check_pr_target.py

@@ -8,25 +8,25 @@ from ..utils import LintLevels, Settings
 
 
 class RuleCheckPrTarget(Rule):
-    def __init__(self, settings: Optional[Settings] = None) -> None:
+    def __init__(self, settings: Optional[Settings] = None, lint_level: Optional[LintLevels] = LintLevels.NONE) -> None:
         """
-        To ensure pull_request_target is safe to use, the check-run step is added 
+        To ensure pull_request_target is safe to use, the check-run step is added
         to all jobs as a dependency.
 
-        Once a branch is pushed to Github, it already opens up a vulnerability 
-        even if the check-run scan fails to detect this. 
-        
-        In order to prevent a vulnerable branch from being used for an attack 
-        prior to being caught through vetting, all pull_request_target workflows 
-        should only be run by users with appropriate permissions.  
+        Once a branch is pushed to Github, it already opens up a vulnerability
+        even if the check-run scan fails to detect this.
+
+        In order to prevent a vulnerable branch from being used for an attack
+        prior to being caught through vetting, all pull_request_target workflows
+        should only be run by users with appropriate permissions.
 
         This greatly reduces the risk as community contributors can't use a fork to run a compromised workflow that uses pull_request_target.
         """
         self.message = "A check-run job must be included as a direct job dependency when pull_request_target is used and the workflow may only apply to runs on the main branch"
-        self.on_fail = LintLevels.WARNING
+        self.on_fail = lint_level
         self.compatibility = [Workflow]
         self.settings = settings
-    
+
     def targets_main_branch(self, obj:Workflow) -> bool:
         if obj.on["pull_request_target"].get("branches"):
             branches_list = obj.on["pull_request_target"].get("branches")
@@ -43,7 +43,7 @@ class RuleCheckPrTarget(Rule):
             if job.uses == "bitwarden/gh-actions/.github/workflows/check-run.yml@main":
                 return True, name
         return False, ""
-    
+
     def check_run_required(self, obj:Workflow, check_job:str) -> list:
         missing_jobs = []
         for job in list(obj.jobs.keys()):

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.0}/src/bitwarden_workflow_linter/rules/job_environment_prefix.py

@@ -22,16 +22,18 @@ class RuleJobEnvironmentPrefix(Rule):
     visible when debugging a shell Step.
     """
 
-    def __init__(self, settings: Optional[Settings] = None) -> None:
+    def __init__(self, settings: Optional[Settings] = None, lint_level: Optional[LintLevels] = LintLevels.NONE) -> None:
         """RuleJobEnvironmentPrefix constructor to override the Rule class.
 
         Args:
           settings:
             A Settings object that contains any default, overridden, or custom settings
             required anywhere in the application.
+          lint_level:
+            The LintLevels enum value to determine the severity of the rule.
         """
         self.message = "Job environment vars should start with an underscore:"
-        self.on_fail = LintLevels.ERROR
+        self.on_fail = lint_level
         self.compatibility = [Job]
         self.settings = settings
 

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.0}/src/bitwarden_workflow_linter/rules/name_capitalized.py

@@ -16,16 +16,18 @@ class RuleNameCapitalized(Rule):
     A simple standard to help keep uniformity in naming.
     """
 
-    def __init__(self, settings: Optional[Settings] = None) -> None:
+    def __init__(self, settings: Optional[Settings] = None, lint_level: Optional[LintLevels] = LintLevels.NONE) -> None:
         """Constructor for RuleNameCapitalized to override the Rule class.
 
         Args:
           settings:
             A Settings object that contains any default, overridden, or custom settings
             required anywhere in the application.
+          lint_level:
+            The LintLevels enum value to determine the severity of the rule.
         """
         self.message = "name must capitalized"
-        self.on_fail = LintLevels.ERROR
+        self.on_fail = lint_level
         self.settings = settings
 
     def fn(self, obj: Union[Workflow, Job, Step]) -> Tuple[bool, str]:

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.0}/src/bitwarden_workflow_linter/rules/name_exists.py

@@ -19,16 +19,18 @@ class RuleNameExists(Rule):
     It also helps with uniformity of runs.
     """
 
-    def __init__(self, settings: Optional[Settings] = None) -> None:
+    def __init__(self, settings: Optional[Settings] = None, lint_level: Optional[LintLevels] = LintLevels.NONE) -> None:
         """Constructor for RuleNameCapitalized to override Rule class.
 
         Args:
           settings:
             A Settings object that contains any default, overridden, or custom settings
             required anywhere in the application.
+          lint_level:
+            The LintLevels enum value to determine the severity of the rule.
         """
         self.message = "name must exist"
-        self.on_fail = LintLevels.ERROR
+        self.on_fail = lint_level
         self.settings = settings
 
     def fn(self, obj: Union[Workflow, Job, Step]) -> Tuple[bool, str]:

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.0}/src/bitwarden_workflow_linter/rules/pinned_job_runner.py

@@ -15,16 +15,18 @@ class RuleJobRunnerVersionPinned(Rule):
     breaking the majority of our pipelines, we pin the versions.
     """
 
-    def __init__(self, settings: Optional[Settings] = None) -> None:
+    def __init__(self, settings: Optional[Settings] = None, lint_level: Optional[LintLevels] = LintLevels.NONE) -> None:
         """Constructor for RuleJobRunnerVersionPinned to override Rule class.
 
         Args:
           settings:
             A Settings object that contains any default, overridden, or custom settings
             required anywhere in the application.
+          lint_level:
+            The LintLevels enum value to determine the severity of the rule.
         """
         self.message = "Workflow runner must be pinned"
-        self.on_fail = LintLevels.ERROR
+        self.on_fail = lint_level
         self.compatibility = [Job]
         self.settings = settings
 

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.0}/src/bitwarden_workflow_linter/rules/run_actionlint.py

@@ -71,9 +71,9 @@ please check your package installer or manually install it",
 class RunActionlint(Rule):
     """Rule to run actionlint as part of workflow linter V2."""
 
-    def __init__(self, settings: Optional[Settings] = None) -> None:
+    def __init__(self, settings: Optional[Settings] = None, lint_level: Optional[LintLevels] = LintLevels.NONE) -> None:
         self.message = "Actionlint must pass without errors"
-        self.on_fail = LintLevels.WARNING
+        self.on_fail = lint_level
         self.compatibility = [Workflow]
         self.settings = settings
 

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.0}/src/bitwarden_workflow_linter/rules/step_approved.py

@@ -15,15 +15,17 @@ class RuleStepUsesApproved(Rule):
     check against.
     """
 
-    def __init__(self, settings: Optional[Settings] = None) -> None:
+    def __init__(self, settings: Optional[Settings] = None, lint_level: Optional[LintLevels] = LintLevels.NONE) -> None:
         """Constructor for RuleStepUsesApproved to override Rule class.
 
         Args:
           settings:
             A Settings object that contains any default, overridden, or custom settings
             required anywhere in the application.
+          lint_level:
+            The LintLevels enum value to determine the severity of the rule.
         """
-        self.on_fail = LintLevels.ERROR
+        self.on_fail = lint_level
         self.compatibility = [Step]
         self.settings = settings
 

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.0}/src/bitwarden_workflow_linter/rules/step_pinned.py

@@ -23,15 +23,17 @@ class RuleStepUsesPinned(Rule):
     updated.
     """
 
-    def __init__(self, settings: Optional[Settings] = None) -> None:
+    def __init__(self, settings: Optional[Settings] = None, lint_level: Optional[LintLevels] = LintLevels.ERROR) -> None:
         """Constructor for RuleStepUsesPinned to override base Rule.
 
         Args:
           settings:
             A Settings object that contains any default, overridden, or custom settings
             required anywhere in the application.
+          lint_level:
+            The LintLevels enum value to determine the severity of the rule.
         """
-        self.on_fail = LintLevels.ERROR
+        self.on_fail = lint_level
         self.compatibility = [Step]
         self.settings = settings
 

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.0}/src/bitwarden_workflow_linter/rules/underscore_outputs.py

@@ -17,16 +17,18 @@ class RuleUnderscoreOutputs(Rule):
     A simple standard to ensure uniformity in naming.
     """
 
-    def __init__(self, settings: Optional[Settings] = None) -> None:
+    def __init__(self, settings: Optional[Settings] = None, lint_level: Optional[LintLevels] = LintLevels.ERROR) -> None:
         """Constructor for RuleUnderscoreOutputs to override the Rule class.
 
         Args:
           settings:
             A Settings object that contains any default, overridden, or custom settings
             required anywhere in the application.
+          lint_level:
+            The LintLevels enum value to determine the severity of the rule.
         """
         self.message = "outputs with more than one word should use an underscore"
-        self.on_fail = LintLevels.WARNING
+        self.on_fail = lint_level
         self.compatibility = [Workflow, Job, Step]
         self.settings = settings
 

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.0}/src/bitwarden_workflow_linter/utils.py

@@ -111,12 +111,12 @@ SettingsFromFactory = TypeVar("SettingsFromFactory", bound="Settings")
 class Settings:
     """Class that contains configuration-as-code for any portion of the app."""
 
-    enabled_rules: list[str]
+    enabled_rules: list[dict[str, str]]
     approved_actions: dict[str, Action]
 
     def __init__(
         self,
-        enabled_rules: Optional[list[str]] = None,
+        enabled_rules: Optional[list[dict[str, str]]] = None,
         approved_actions: Optional[dict[str, dict[str, str]]] = None,
     ) -> None:
         """Settings object that can be overridden in settings.py.

bitwarden_workflow_linter-0.5.7/settings.yaml

@@ -1,12 +0,0 @@
-enabled_rules:
-  - bitwarden_workflow_linter.rules.name_exists.RuleNameExists
-  - bitwarden_workflow_linter.rules.name_capitalized.RuleNameCapitalized
-  - bitwarden_workflow_linter.rules.pinned_job_runner.RuleJobRunnerVersionPinned
-  - bitwarden_workflow_linter.rules.job_environment_prefix.RuleJobEnvironmentPrefix
-#   - bitwarden_workflow_linter.rules.step_approved.RuleStepUsesApproved
-  - bitwarden_workflow_linter.rules.step_pinned.RuleStepUsesPinned
-  - bitwarden_workflow_linter.rules.underscore_outputs.RuleUnderscoreOutputs
-  - bitwarden_workflow_linter.rules.run_actionlint.RunActionlint
-  - bitwarden_workflow_linter.rules.check_pr_target.RuleCheckPrTarget
-
-approved_actions_path: default_actions.json

bitwarden_workflow_linter-0.5.7/src/bitwarden_workflow_linter/default_settings.yaml

@@ -1,12 +0,0 @@
-enabled_rules:
-  - bitwarden_workflow_linter.rules.name_exists.RuleNameExists
-  - bitwarden_workflow_linter.rules.name_capitalized.RuleNameCapitalized
-  - bitwarden_workflow_linter.rules.pinned_job_runner.RuleJobRunnerVersionPinned
-  - bitwarden_workflow_linter.rules.job_environment_prefix.RuleJobEnvironmentPrefix
-#   - bitwarden_workflow_linter.rules.step_approved.RuleStepUsesApproved
-  - bitwarden_workflow_linter.rules.step_pinned.RuleStepUsesPinned
-  - bitwarden_workflow_linter.rules.underscore_outputs.RuleUnderscoreOutputs
-  - bitwarden_workflow_linter.rules.run_actionlint.RunActionlint
-  - bitwarden_workflow_linter.rules.check_pr_target.RuleCheckPrTarget
-
-approved_actions_path: default_actions.json