gitlabcis 1.3.2__py3-none-any.whl

gitlabcis/benchmarks/deployment_5/deployment_environment_5_2.py

@@ -0,0 +1,66 @@
+# -------------------------------------------------------------------------
+
+
+def automate_deployment(glEntity, glObject, **kwargs):
+    """
+    id: 5.2.1
+    title: Ensure deployments are automated
+    """
+
+    from gitlab.exceptions import (GitlabAuthenticationError, GitlabGetError,
+                                   GitlabHttpError)
+
+    from gitlabcis.utils import ci
+
+    try:
+        gitlab_ci_yml = ci.getConfig(glEntity, glObject, **kwargs)
+
+        ciFile, reason = gitlab_ci_yml.popitem()
+
+        if ciFile in [None, False]:
+            return {ciFile: reason}
+        else:
+            return {None: 'Ci config file is available, '
+                    'however this check requires manual '
+                    'validation'}
+
+    except (GitlabHttpError, GitlabGetError, GitlabAuthenticationError) as e:
+        if e.response_code in [401, 403]:
+            return {None: 'Insufficient permissions'}
+
+
+# -------------------------------------------------------------------------
+
+
+def reproducible_deployment(glEntity, glObject, **kwargs):
+    """
+    id: 5.2.2
+    title: Ensure the deployment environment is reproducible
+    """
+
+    # We cannot automatically answer this check, therefore we SKIP:
+    return {None: 'This check requires validation'}
+
+# -------------------------------------------------------------------------
+
+
+def limit_prod_access(glEntity, glObject, **kwargs):
+    """
+    id: 5.2.3
+    title: Ensure access to production environment is limited
+    """
+
+    # We cannot automatically answer this check, therefore we SKIP:
+    return {None: 'This check requires validation'}
+
+# -------------------------------------------------------------------------
+
+
+def disable_default_passwords(glEntity, glObject, **kwargs):
+    """
+    id: 5.2.4
+    title: Ensure default passwords are not used
+    """
+
+    # We cannot automatically answer this check, therefore we SKIP:
+    return {None: 'This check requires validation'}

gitlabcis/benchmarks/source_code_1/__init__.py

@@ -0,0 +1,6 @@
+
+from . import code_changes_1_1  # noqa: F401
+from . import repository_management_1_2  # noqa: F401
+from . import contribution_access_1_3  # noqa: F401
+from . import third_party_1_4  # noqa: F401
+from . import code_risks_1_5  # noqa: F401