Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Introducing linters to ops-toolbelt builds #151

Open
wants to merge 6 commits into
base: master
Choose a base branch
from

Conversation

mimiteto
Copy link
Contributor

@mimiteto mimiteto commented Nov 12, 2024

What this PR does / why we need it:
PR introduces SAST linters:

  • bandit for python code
  • shellcheck for bash code

Which issue(s) this PR fixes:
Fixes #149

Special notes for your reviewer:
On release build lint outputs are saved within the root of the repo, rest of the pipeline execute the linters but don't save the results.

Release note:

Introducing linters for ops-toolbelt builds

@gardener-robot-ci-3
Copy link
Contributor

This PR proposes changes that would break the pipeline definition:

ops-toolbelt-feat_sast-linters: Traceback (most recent call last):
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 141, in render
    definition_descriptor = self._render(definition_descriptor)
                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 185, in _render
    'definition': factory.create_pipeline_definition(),
                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/concourse/factory.py", line 108, in create_pipeline_definition
    validator.validate()
  File "/usr/lib/python3.12/site-packages/concourse/validator.py", line 19, in validate
    self._validate_variant(variant)
  File "/usr/lib/python3.12/site-packages/concourse/validator.py", line 24, in _validate_variant
    self._validate_element(variant)
  File "/usr/lib/python3.12/site-packages/concourse/validator.py", line 29, in _validate_element
    element.validate()
  File "/usr/lib/python3.12/site-packages/model/base.py", line 36, in validate
    self._validate_known_attributes()
  File "/usr/lib/python3.12/site-packages/model/base.py", line 65, in _validate_known_attributes
    raise ModelValidationError(
model.base.ModelValidationError: JobVariant:<unknown>: The following attributes are unknown: verify-bandit, verify-shellcheck.

@gardener-robot gardener-robot added needs/review Needs review size/s Size of pull request is small (see gardener-robot robot/bots/size.py) labels Nov 12, 2024
@gardener-robot-ci-3 gardener-robot-ci-3 added the reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) label Nov 12, 2024
@gardener-robot-ci-2 gardener-robot-ci-2 added needs/ok-to-test Needs approval for testing (check PR in detail before setting this label because PR is run on CI/CD) and removed reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) labels Nov 12, 2024
@gardener-robot-ci-2
Copy link
Contributor

This PR proposes changes that would break the pipeline definition:

ops-toolbelt-feat_sast-linters: Traceback (most recent call last):
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 141, in render
    definition_descriptor = self._render(definition_descriptor)
                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 225, in _render
    raise RuntimeError(
RuntimeError: An exception occured when rendering pipeline 'ops-toolbelt-feat_sast-linters': 

Traceback (most recent call last):
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 217, in _render
    definition_descriptor.pipeline = template.render(
  File "/usr/lib/python3.12/site-packages/mako/template.py", line 438, in render
    return runtime._render(self, self.callable_, args, data)
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 874, in _render
    _render_context(
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 916, in _render_context
    _exec_template(inherit, lclcontext, args=args, kwargs=kwargs)
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 943, in _exec_template
    callable_(context, *args, **kwargs)
  File "memory:0x7f9b2f715a60", line 666, in render_body
    ${job(variant)}
  File "memory:0x7f9b2f715a60", line 0, in job
    
  File "memory:0x7f9b2f715a60", line 654, in render_job
    ${step(4, job_variant, job_variant.step(step_name))}
  File "memory:0x7f9b2f715a60", line 619, in step
    <%def name="job(job_variant)">
  File "memory:0x7f9b2f715a60", line 600, in render_step
    ${execute(2, job_step, job_variant, source_repo, source_repo_github_cfg_name)}
  File "memory:0x7f9b2f715a60", line 567, in execute
    <%def name="step(indent, job_variant, job_step)" filter="indent_func(indent),trim">
  File "memory:0x7f9b2f715a60", line 453, in render_execute
    ${name}: '${eval(expression, {
  File "<string>", line 1, in <module>
    
NameError: name 'python' is not defined


@gardener-robot-ci-2 gardener-robot-ci-2 added reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) and removed reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) labels Nov 12, 2024
@gardener-robot-ci-2
Copy link
Contributor

This PR proposes changes that would break the pipeline definition:

ops-toolbelt-feat_sast-linters: Traceback (most recent call last):
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 141, in render
    definition_descriptor = self._render(definition_descriptor)
                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 225, in _render
    raise RuntimeError(
RuntimeError: An exception occured when rendering pipeline 'ops-toolbelt-feat_sast-linters': 

Traceback (most recent call last):
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 217, in _render
    definition_descriptor.pipeline = template.render(
  File "/usr/lib/python3.12/site-packages/mako/template.py", line 438, in render
    return runtime._render(self, self.callable_, args, data)
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 874, in _render
    _render_context(
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 916, in _render_context
    _exec_template(inherit, lclcontext, args=args, kwargs=kwargs)
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 943, in _exec_template
    callable_(context, *args, **kwargs)
  File "memory:0x7ff92f9707d0", line 666, in render_body
    ${job(variant)}
  File "memory:0x7ff92f9707d0", line 0, in job
    
  File "memory:0x7ff92f9707d0", line 654, in render_job
    ${step(4, job_variant, job_variant.step(step_name))}
  File "memory:0x7ff92f9707d0", line 619, in step
    <%def name="job(job_variant)">
  File "memory:0x7ff92f9707d0", line 600, in render_step
    ${execute(2, job_step, job_variant, source_repo, source_repo_github_cfg_name)}
  File "memory:0x7ff92f9707d0", line 567, in execute
    <%def name="step(indent, job_variant, job_step)" filter="indent_func(indent),trim">
  File "memory:0x7ff92f9707d0", line 453, in render_execute
    ${name}: '${eval(expression, {
  File "<string>", line 1, in <module>
    
NameError: name 'python' is not defined


@gardener-robot-ci-2 gardener-robot-ci-2 added reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) and removed reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) labels Nov 12, 2024
@gardener-robot-ci-2
Copy link
Contributor

This PR proposes changes that would break the pipeline definition:

ops-toolbelt-feat_sast-linters: Traceback (most recent call last):
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 141, in render
    definition_descriptor = self._render(definition_descriptor)
                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 225, in _render
    raise RuntimeError(
RuntimeError: An exception occured when rendering pipeline 'ops-toolbelt-feat_sast-linters': 

Traceback (most recent call last):
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 217, in _render
    definition_descriptor.pipeline = template.render(
  File "/usr/lib/python3.12/site-packages/mako/template.py", line 438, in render
    return runtime._render(self, self.callable_, args, data)
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 874, in _render
    _render_context(
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 916, in _render_context
    _exec_template(inherit, lclcontext, args=args, kwargs=kwargs)
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 943, in _exec_template
    callable_(context, *args, **kwargs)
  File "memory:0x7f5d1d6c43e0", line 666, in render_body
    ${job(variant)}
  File "memory:0x7f5d1d6c43e0", line 0, in job
    
  File "memory:0x7f5d1d6c43e0", line 654, in render_job
    ${step(4, job_variant, job_variant.step(step_name))}
  File "memory:0x7f5d1d6c43e0", line 619, in step
    <%def name="job(job_variant)">
  File "memory:0x7f5d1d6c43e0", line 600, in render_step
    ${execute(2, job_step, job_variant, source_repo, source_repo_github_cfg_name)}
  File "memory:0x7f5d1d6c43e0", line 567, in execute
    <%def name="step(indent, job_variant, job_step)" filter="indent_func(indent),trim">
  File "memory:0x7f5d1d6c43e0", line 453, in render_execute
    ${name}: '${eval(expression, {
  File "<string>", line 1, in <module>
    
NameError: name 'python' is not defined


@gardener-robot-ci-2 gardener-robot-ci-2 added reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) and removed reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) labels Nov 13, 2024
@gardener-robot-ci-2
Copy link
Contributor

This PR proposes changes that would break the pipeline definition:

ops-toolbelt-feat_sast-linters: Traceback (most recent call last):
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 141, in render
    definition_descriptor = self._render(definition_descriptor)
                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 225, in _render
    raise RuntimeError(
RuntimeError: An exception occured when rendering pipeline 'ops-toolbelt-feat_sast-linters': 

Traceback (most recent call last):
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 217, in _render
    definition_descriptor.pipeline = template.render(
  File "/usr/lib/python3.12/site-packages/mako/template.py", line 438, in render
    return runtime._render(self, self.callable_, args, data)
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 874, in _render
    _render_context(
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 916, in _render_context
    _exec_template(inherit, lclcontext, args=args, kwargs=kwargs)
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 943, in _exec_template
    callable_(context, *args, **kwargs)
  File "memory:0x7ff92e5e3230", line 666, in render_body
    ${job(variant)}
  File "memory:0x7ff92e5e3230", line 0, in job
    
  File "memory:0x7ff92e5e3230", line 654, in render_job
    ${step(4, job_variant, job_variant.step(step_name))}
  File "memory:0x7ff92e5e3230", line 619, in step
    <%def name="job(job_variant)">
  File "memory:0x7ff92e5e3230", line 600, in render_step
    ${execute(2, job_step, job_variant, source_repo, source_repo_github_cfg_name)}
  File "memory:0x7ff92e5e3230", line 567, in execute
    <%def name="step(indent, job_variant, job_step)" filter="indent_func(indent),trim">
  File "memory:0x7ff92e5e3230", line 453, in render_execute
    ${name}: '${eval(expression, {
  File "<string>", line 1, in <module>
    
NameError: name 'python' is not defined


@gardener-robot gardener-robot added size/xl Size of pull request is huge (see gardener-robot robot/bots/size.py) needs/second-opinion Needs second review by someone else labels Nov 13, 2024
@gardener-robot-ci-2 gardener-robot-ci-2 added reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) and removed reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) labels Nov 13, 2024
@gardener-robot gardener-robot removed the size/s Size of pull request is small (see gardener-robot robot/bots/size.py) label Nov 13, 2024
I've disabled B404, as it's just generated when you call `subprocess`.
In addition - I've dissabled B603 as we rely on the problematic part
for the analisys.
@gardener-robot-ci-3
Copy link
Contributor

This PR proposes changes that would break the pipeline definition:

ops-toolbelt-feat_sast-linters: Traceback (most recent call last):
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 141, in render
    definition_descriptor = self._render(definition_descriptor)
                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 225, in _render
    raise RuntimeError(
RuntimeError: An exception occured when rendering pipeline 'ops-toolbelt-feat_sast-linters': 

Traceback (most recent call last):
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 217, in _render
    definition_descriptor.pipeline = template.render(
  File "/usr/lib/python3.12/site-packages/mako/template.py", line 438, in render
    return runtime._render(self, self.callable_, args, data)
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 874, in _render
    _render_context(
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 916, in _render_context
    _exec_template(inherit, lclcontext, args=args, kwargs=kwargs)
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 943, in _exec_template
    callable_(context, *args, **kwargs)
  File "memory:0x7fc1c8da0410", line 666, in render_body
    ${job(variant)}
  File "memory:0x7fc1c8da0410", line 0, in job
    
  File "memory:0x7fc1c8da0410", line 654, in render_job
    ${step(4, job_variant, job_variant.step(step_name))}
  File "memory:0x7fc1c8da0410", line 619, in step
    <%def name="job(job_variant)">
  File "memory:0x7fc1c8da0410", line 600, in render_step
    ${execute(2, job_step, job_variant, source_repo, source_repo_github_cfg_name)}
  File "memory:0x7fc1c8da0410", line 567, in execute
    <%def name="step(indent, job_variant, job_step)" filter="indent_func(indent),trim">
  File "memory:0x7fc1c8da0410", line 453, in render_execute
    ${name}: '${eval(expression, {
  File "<string>", line 1, in <module>
    
NameError: name 'python' is not defined


@gardener-robot-ci-3 gardener-robot-ci-3 added reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) and removed reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) labels Nov 13, 2024
@gardener-robot-ci-3
Copy link
Contributor

This PR proposes changes that would break the pipeline definition:

ops-toolbelt-feat_sast-linters: Traceback (most recent call last):
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 141, in render
    definition_descriptor = self._render(definition_descriptor)
                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 225, in _render
    raise RuntimeError(
RuntimeError: An exception occured when rendering pipeline 'ops-toolbelt-feat_sast-linters': 

Traceback (most recent call last):
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 217, in _render
    definition_descriptor.pipeline = template.render(
  File "/usr/lib/python3.12/site-packages/mako/template.py", line 438, in render
    return runtime._render(self, self.callable_, args, data)
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 874, in _render
    _render_context(
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 916, in _render_context
    _exec_template(inherit, lclcontext, args=args, kwargs=kwargs)
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 943, in _exec_template
    callable_(context, *args, **kwargs)
  File "memory:0x7f9b2d8c9d00", line 666, in render_body
    ${job(variant)}
  File "memory:0x7f9b2d8c9d00", line 0, in job
    
  File "memory:0x7f9b2d8c9d00", line 654, in render_job
    ${step(4, job_variant, job_variant.step(step_name))}
  File "memory:0x7f9b2d8c9d00", line 619, in step
    <%def name="job(job_variant)">
  File "memory:0x7f9b2d8c9d00", line 600, in render_step
    ${execute(2, job_step, job_variant, source_repo, source_repo_github_cfg_name)}
  File "memory:0x7f9b2d8c9d00", line 567, in execute
    <%def name="step(indent, job_variant, job_step)" filter="indent_func(indent),trim">
  File "memory:0x7f9b2d8c9d00", line 453, in render_execute
    ${name}: '${eval(expression, {
  File "<string>", line 1, in <module>
    
NameError: name 'bash' is not defined


@gardener-robot-ci-3 gardener-robot-ci-3 added the reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) label Nov 13, 2024
@gardener-robot-ci-1 gardener-robot-ci-1 removed the reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) label Nov 13, 2024
@gardener-robot-ci-1
Copy link
Contributor

This PR proposes changes that would break the pipeline definition:

ops-toolbelt-feat_sast-linters: Traceback (most recent call last):
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 141, in render
    definition_descriptor = self._render(definition_descriptor)
                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 225, in _render
    raise RuntimeError(
RuntimeError: An exception occured when rendering pipeline 'ops-toolbelt-feat_sast-linters': 

Traceback (most recent call last):
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 217, in _render
    definition_descriptor.pipeline = template.render(
  File "/usr/lib/python3.12/site-packages/mako/template.py", line 438, in render
    return runtime._render(self, self.callable_, args, data)
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 874, in _render
    _render_context(
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 916, in _render_context
    _exec_template(inherit, lclcontext, args=args, kwargs=kwargs)
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 943, in _exec_template
    callable_(context, *args, **kwargs)
  File "memory:0x7f9b2cc39af0", line 666, in render_body
    ${job(variant)}
  File "memory:0x7f9b2cc39af0", line 0, in job
    
  File "memory:0x7f9b2cc39af0", line 654, in render_job
    ${step(4, job_variant, job_variant.step(step_name))}
  File "memory:0x7f9b2cc39af0", line 619, in step
    <%def name="job(job_variant)">
  File "memory:0x7f9b2cc39af0", line 600, in render_step
    ${execute(2, job_step, job_variant, source_repo, source_repo_github_cfg_name)}
  File "memory:0x7f9b2cc39af0", line 567, in execute
    <%def name="step(indent, job_variant, job_step)" filter="indent_func(indent),trim">
  File "memory:0x7f9b2cc39af0", line 453, in render_execute
    ${name}: '${eval(expression, {
  File "<string>", line 1, in <module>
    
NameError: name 'bash' is not defined


@gardener-robot-ci-1 gardener-robot-ci-1 added the reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) label Nov 13, 2024
@gardener-robot-ci-3 gardener-robot-ci-3 removed the reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) label Nov 13, 2024
@gardener-robot-ci-1
Copy link
Contributor

This PR proposes changes that would break the pipeline definition:

ops-toolbelt-feat_sast-linters: Traceback (most recent call last):
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 141, in render
    definition_descriptor = self._render(definition_descriptor)
                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 225, in _render
    raise RuntimeError(
RuntimeError: An exception occured when rendering pipeline 'ops-toolbelt-feat_sast-linters': 

Traceback (most recent call last):
  File "/usr/lib/python3.12/site-packages/concourse/replicator.py", line 217, in _render
    definition_descriptor.pipeline = template.render(
  File "/usr/lib/python3.12/site-packages/mako/template.py", line 438, in render
    return runtime._render(self, self.callable_, args, data)
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 874, in _render
    _render_context(
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 916, in _render_context
    _exec_template(inherit, lclcontext, args=args, kwargs=kwargs)
  File "/usr/lib/python3.12/site-packages/mako/runtime.py", line 943, in _exec_template
    callable_(context, *args, **kwargs)
  File "memory:0x7f5d1d60dac0", line 666, in render_body
    ${job(variant)}
  File "memory:0x7f5d1d60dac0", line 0, in job
    
  File "memory:0x7f5d1d60dac0", line 654, in render_job
    ${step(4, job_variant, job_variant.step(step_name))}
  File "memory:0x7f5d1d60dac0", line 619, in step
    <%def name="job(job_variant)">
  File "memory:0x7f5d1d60dac0", line 600, in render_step
    ${execute(2, job_step, job_variant, source_repo, source_repo_github_cfg_name)}
  File "memory:0x7f5d1d60dac0", line 567, in execute
    <%def name="step(indent, job_variant, job_step)" filter="indent_func(indent),trim">
  File "memory:0x7f5d1d60dac0", line 453, in render_execute
    ${name}: '${eval(expression, {
  File "<string>", line 1, in <module>
    
NameError: name 'python' is not defined


@gardener-robot-ci-1 gardener-robot-ci-1 added the reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) label Nov 13, 2024
@gardener-robot-ci-2 gardener-robot-ci-2 removed the reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) label Nov 13, 2024
@gardener-robot-ci-3
Copy link
Contributor

The pipeline-definition has been fixed.

@gardener-robot-ci-3 gardener-robot-ci-3 added reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) and removed reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) labels Nov 13, 2024
@mimiteto mimiteto marked this pull request as ready for review November 14, 2024 07:47
@mimiteto mimiteto requested a review from a team as a code owner November 14, 2024 07:47
@gardener-robot-ci-3 gardener-robot-ci-3 added reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) and removed reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) labels Nov 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
needs/ok-to-test Needs approval for testing (check PR in detail before setting this label because PR is run on CI/CD) needs/review Needs review needs/second-opinion Needs second review by someone else size/xl Size of pull request is huge (see gardener-robot robot/bots/size.py)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Introduce Static Application Security Testing (SAST)
5 participants