root
/
tsunami-security-scanner
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • c8751e1597 Bump python dependencies due to vulnerabilities. master Pierre Precourt 2025-12-15 09:34:40 -0800
  • df0c43cace Add explicit dependency on `:tsunami-workflow:shadowJar` in Gradle. Pierre Precourt 2025-11-13 00:32:56 -0800
  • abfda5137b Regenerate golang protos. Pierre Precourt 2025-11-12 09:30:41 -0800
  • 47de25a023 Protos now have their own package when generated in Golang. Pierre Precourt 2025-11-12 09:29:30 -0800
  • f03e6553b6 Rollback b893240 as the flag is unsupported. Pierre Precourt 2025-11-07 01:40:36 -0800
  • b893240f46 Provide instructions to generate the golang definition of the Tsunami protobufs. Pierre Precourt 2025-11-05 00:50:38 -0800
  • a4ec132129 Fix formatting of the announcement. Pierre Precourt 2025-10-16 07:27:10 -0700
  • beac62670e Announcement for a new payout structure for the reward program. Pierre Precourt 2025-10-16 06:50:23 -0700
  • 74b95a484b Change the definition of Python plugins to require the `GetAdvisories` function to be defined. Pierre Precourt 2025-10-02 02:01:32 -0700
  • edd1346ade Each Python plugin now has a `GetAdvisories` function that returns the vulnerability it detects. Pierre Precourt 2025-10-02 01:27:51 -0700
  • c17441419d Update Kokoro build configuration Tsunami Team 2025-09-25 11:02:13 -0700
  • 24efb0f80a The core engine and callback repositories used to build plugins are now configurable using environment variables. Pierre Precourt 2025-09-03 09:16:46 -0700
  • 66790a2138 Partially revert [f4f51eb](f4f51eb385). Pierre Precourt 2025-09-03 09:02:44 -0700
  • e7240b2a51 The core engine's dependency on the callback server repository is now configurable through environment variables. Pierre Precourt 2025-09-03 09:01:38 -0700
  • 42dc703c8a Align dependencies versions throughout the Tsunami repositories. Pierre Precourt 2025-08-27 00:09:05 -0700
  • 5f91b6ba14 No public description Pierre Precourt 2025-08-19 11:35:36 -0700
  • 90b6cbfe08 Merge pull request #138 from GameRoMan:patch-1 Copybara-Service 2025-08-20 00:57:27 -0700
  • 259280aa0d No public description Pierre Precourt 2025-08-18 02:35:13 -0700
  • 10a0bb8059 Revert enforcement of SHA-512 dependency verification. Computation is not recursive and hence breaks the build. Pierre Precourt 2025-08-18 01:29:40 -0700
  • 7883d1da7c Enforce SHA-512 hash verification of dependencies for Tsunami. Pierre Precourt 2025-08-18 00:57:18 -0700
  • f4f51eb385 Remove gradle directives used to distribute maven releases. We are not releasing through Maven anymore. Pierre Precourt 2025-08-18 00:41:36 -0700
  • 360b6a8679 Fix broken links in the documentation. Pierre Precourt 2025-08-15 11:30:14 -0700
  • 25d5f75d22 Align all Tsunami dependencies to the same version. Pierre Precourt 2025-08-15 11:22:42 -0700
  • d11bbbd810 Add `setuptools` to secure Python requirements. Pierre Precourt 2025-08-15 11:11:27 -0700
  • 5d632f8368 Update the documentation to make build/run instructions clearer. Pierre Precourt 2025-08-08 09:56:06 -0700
  • 817a58480c Add pyzmq dependency to plugin server. Annie Mao 2025-08-05 08:20:32 -0700
  • 08b0b7d21e Minor fix to the documentation to reflect changes with the Python server. Pierre Precourt 2025-07-31 11:07:33 -0700
  • 2b6a0cf202 Hotpatch the path to the payload file when building the core image to facilitate usage of the Python plugins. Pierre Precourt 2025-07-31 11:06:40 -0700
  • 89af7f7733 Ensure all required dependencies are installed for Python plugins and that the search path is automatically extended using `__init__.py` files. Pierre Precourt 2025-07-30 09:43:05 -0700
  • 7c2a07a352 Minor change to the documentation to make Python plugins work. stable Pierre Precourt 2025-07-30 08:07:50 -0700
  • 3fbeeb6b08
         Merge e52fb28606 into 8b91a373a4 dependabot[bot] 2025-07-29 23:42:26 +0200
  • 8b91a373a4 Introduce a configuration option to disable following redirects for specific HTTP requests in the templated format. Pierre Precourt 2025-07-29 01:36:44 -0700
  • 4075e6495a Declare a few more explicit dependencies in Gradle. Pierre Precourt 2025-07-29 01:28:53 -0700
  • ef0ed8553b Update the core and full images to package the Python server and plugins. Pierre Precourt 2025-07-25 11:20:45 -0700
  • 447d4adadd Ensure the path to the payload definitions can be configured. Pierre Precourt 2025-07-25 11:06:22 -0700
  • 9bd1ac7841 Update the development Docker to provide a Python environment for other dockers. This environment is copied over to final images. Pierre Precourt 2025-07-25 10:28:14 -0700
  • 5e40acbed9 Improve navigation on GitHub pages. Pierre Precourt 2025-07-25 09:18:31 -0700
  • bf2e5e3bbe Limit permissions of the runner for build-only jobs. Pierre Precourt 2025-07-18 09:40:56 -0700
  • fab404a89e Stop depending on the Maven release of the callback server. Directly use the stable branch of GitHub. Pierre Precourt 2025-07-15 01:33:31 -0700
  • 3aa29cbf9c Inline and reorganize dependencies in the core engine. Pierre Precourt 2025-07-14 10:11:01 -0700
  • 434b0994df Minor fixes to the documentation on how to develop using our docker images. Pierre Precourt 2025-07-01 07:15:30 -0700
  • b81570c3dc remove gradle wrappers tooryx 2025-06-27 10:32:24 +0000
  • 7a7f979549 Now that we are bundling gradle, we do not need wrappers anymore. Pierre Precourt 2025-06-26 07:47:32 -0700
  • f61c365363 Add facebook plugins to the full image of Tsunami. Pierre Precourt 2025-06-26 07:29:09 -0700
  • ec12128f2a Now that we have gradle bundled in the dev docker, we do not need wrappers anymore. Pierre Precourt 2025-06-26 07:28:23 -0700
  • e711470c15 Fix typo in the name of the branch in the core-push workflow. Pierre Precourt 2025-06-26 07:26:39 -0700
  • 950cf9a564 Fix a minor typo. Pierre Precourt 2025-06-26 06:43:20 -0700
  • 2637ad9c75 Put dependencies in `/usr/dependencies` instead of `/usr/tsunami` to avoid them being kept in composite layers. Pierre Precourt 2025-06-26 06:00:33 -0700
  • 5eb50c0113 Update the developper documentation to use the shared devel image. Pierre Precourt 2025-06-26 05:42:04 -0700
  • c6032ef900 Introduce a devel image that is the base of all other images, to make unification of the dev dependencies of Tsunami easier to maintain throughout the different images. Pierre Precourt 2025-06-26 05:19:16 -0700
  • 7922c444a7 Update the REAME with the latest docker information. Pierre Precourt 2025-06-26 05:10:53 -0700
  • d42d8eb5bc Update the build badge to use the new docker build action. Pierre Precourt 2025-06-25 10:20:46 -0700
  • 020f33ab88 Provide a complete Tsunami docker image. Pierre Precourt 2025-06-25 08:12:12 -0700
  • 52df2214f0 Provide a minimal docker image of Tsunami's core. Pierre Precourt 2025-06-25 07:52:25 -0700
  • 2f24ed8242 Adapt the Dockerfile to reflect changes made to the plugins repository. Pierre Precourt 2025-06-25 03:58:06 -0700
  • ebdce25e6d Wrap the `main` function of Tsunami to allow direct use of Tsunami in other Java programs. Pierre Precourt 2025-06-24 04:35:54 -0700
  • 55256fe724 Add a workflow where Tsunami simply dumps the list of currently registered advisories to a textproto file. Pierre Precourt 2025-06-24 00:55:43 -0700
  • 5f2b771355 Upgrade Gradle requirement for Java to version 21. Pierre Precourt 2025-06-24 00:04:20 -0700
  • 7ab538db0a Associate advisories to fake detectors to be able to use them in tests. Pierre Precourt 2025-06-23 08:10:03 -0700
  • 2564356871 Set of minor editions to the documentation. Pierre Precourt 2025-06-19 05:09:01 -0700
  • 252c88b504 Announcing templated-plugins as the default for the Tsunami PRP. Pierre Precourt 2025-06-19 04:03:59 -0700
  • 963126ac95 Switch development version of Tsunami to 0.1.1. Pierre Precourt 2025-06-13 05:03:13 -0700
  • 648464b1d1 Release Tsunami version 0.1.0 v0.1.0 tooryx 2025-06-13 07:31:13 +0000
  • 09b0146a69 Extend the Detector API with a `getAdvisories()` method that returns all advisories used by a detector. Pierre Precourt 2025-06-13 00:14:51 -0700
  • ed54d50f7a Remove auto-numbering as GitHub's markdown does not support it. Pierre Precourt 2025-06-10 07:19:06 -0700
  • c261db3e02 Add the linter in the docker container. Change the documentation accordingly. Pierre Precourt 2025-06-06 01:28:01 -0700
  • 33ba165784 Fix a few typos. Pierre Precourt 2025-06-05 18:20:50 -0700
  • 15da1b4bc4 Add JDWP RCE detector plugin google-labs-jules[bot] 2025-06-05 23:24:53 +0000
  • a19c5ee338 Rework the Dockerfile to facilitate the dev workflow for external contributors. Pierre Precourt 2025-06-05 12:35:17 -0700
  • 4d3a9afa63 `org.apache.hive:hive-jdbc` seems to have a transitive dependency on `netty` that is incompatible with the rest of the dependencies. Upgrading it; this should fix tests. Pierre Precourt 2025-06-05 12:35:02 -0700
  • 42043b540a Reintroduce templated plugins in the documentation. Pierre Precourt 2025-06-05 12:31:22 -0700
  • 65687826f2 Versions `0.0.27` to `0.0.29` have been released so switch development version to `0.0.30`. Pierre Precourt 2025-06-04 13:50:21 -0700
  • 02dfff002c Add missing dependencies to fix the build. Tests are still broken. Pierre Precourt 2025-06-04 13:49:04 -0700
  • 98ec3c8a51 Build the core engine first and fix the copy of its main jar file in the Dockerfile. Pierre Precourt 2025-06-04 13:42:38 -0700
  • 4628c95700 Release Tsunami version 0.0.29 v0.0.29 tooryx 2025-06-04 19:05:09 +0000
  • d7270203d0 [ee15895](ee15895788) completely broke our artifacts published to Maven. This should be fixed. Pierre Precourt 2025-06-04 11:51:50 -0700
  • fa8e09c562 Release Tsunami version 0.0.28 v0.0.28 tooryx 2025-06-04 15:45:49 +0000
  • 4a4d13570b Changing the artifacts directive was a mistake and caused release `0.0.27` to be mostly empty. Pierre Precourt 2025-06-04 08:41:44 -0700
  • 83a6d7f70b Release Tsunami version 0.0.27 v0.0.27 tooryx 2025-06-04 11:26:54 +0000
  • ee15895788 Update the publishing process to maven to reflect changes to gradle 8.14 Pierre Precourt 2025-06-04 04:15:36 -0700
  • 5bccdc2ca6 Actions can now be triggered manually. Pierre Precourt 2025-06-04 04:00:46 -0700
  • d5b91ef4f1 Remove obsolete javadoc directives. Pierre Precourt 2025-06-04 01:33:50 -0700
  • 056b843004 Merge "update the wrappers to version 8.14" Pierre Precourt 2025-06-04 00:50:18 -0700
  • 2c3acb6768 Manually generate the golang code for the proto definitions. Pierre Precourt 2025-06-04 00:46:53 -0700
  • 4bb42c43ad update the wrappers to version 8.14 tooryx 2025-06-04 07:35:01 +0000
  • c4d65ace13 Add a `go.mod` to Tsunami so that we can use Golang utilities. Pierre Precourt 2025-06-03 15:10:17 -0700
  • 3298d22ef9 Update the golang package name for generated proto. Pierre Precourt 2025-06-03 15:10:12 -0700
  • 4c963324d9 Add a dependency for the `genetateProto` task on the `sourcesJar` task when generating proto. Pierre Precourt 2025-05-20 00:54:13 -0700
  • 2c8ae89223 Bump Tsunami build to use Java 21 Pierre Precourt 2025-05-19 13:25:02 -0700
  • 77ed6bb7f3 Update the `Dockerfile` to build the templated plugins. Pierre Precourt 2025-05-19 12:43:50 -0700
  • 78e9c7282c Bump Tsunami container to use JDK-21 instead of JDK-13. Pierre Precourt 2025-05-19 12:37:56 -0700
  • b9dc3e849a Fix a few additional dependency issues to migrate to gradle v8.14. Pierre Precourt 2025-05-19 12:15:21 -0700
  • f425a36b20 revert quick_start_advanced.sh mrMosi 2025-05-19 16:43:16 +0400
  • 3060090ef3 Update gradle files of Tsunami core engine to support gradle 8.14. Pierre Precourt 2025-05-19 01:46:15 -0700
  • e36310b533 Temporarily remove the link to the templated language documentation until it is ready for wider use. Pierre Precourt 2025-05-14 06:41:32 -0700
  • 958bf01587
         Fix type annotation Roman A 2025-05-08 22:58:33 +0100
  • 7ef9967019
         Merge 6d7bfa073b into b5b50b94d7 GiuseppePorcu 2025-04-14 02:50:11 +0000
  • d3df7490fa Add guidelines for reviewing and merging pull requests Ronardc03 2025-03-30 09:56:30 -0400
  • 58a22d6123 Add guidelines for reviewing and merging pull requests Ronardc03 2025-03-30 09:56:24 -0400
  • b5b50b94d7 internal update Nghi Tran 2025-03-24 12:45:39 -0700