CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,914 Commits 7 Branches 2 Tags
d9c6de4e8b01d246fd3974ea65c5077df9e261cf
Commit Graph
36 Commits
Author SHA1 Message Date
Timothy Messier c70a6ff6ba chore: Bump to Go version 1.21.5 
Go 1.21.5 fixes a few vulnerabilities. Most notably for boundary is a
fix in net/http to limit chunked data overhead.

See: https://groups.google.com/g/golang-announce/c/iLGK3x6yuNo
(cherry picked from commit 575cd9d63b1ac4787d048d86b0b209c61a7f3946)
 2023-12-07 19:42:45 +00:00
Damian Debkowski 3394d3e13a chore: update go mod and dependencies (#4073) 2023-11-30 11:45:00 -08:00
Jeff Mitchell 71e685b276 Copy wspb into sdk in preparation for moving it out of main (#4023) 2023-11-08 12:41:08 -05:00
Jeff Mitchell a6c8057244 Update sdk deps (#3969) 
* Update sdk deps

* Use main eventlogger versions
 2023-11-01 14:11:46 -04:00
dependabot[bot] ef01825aee chore(deps): bump golang.org/x/net from 0.9.0 to 0.17.0 in /sdk (#3833) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.9.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.9.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:23:30 -04:00
Jeff Mitchell bec9e80586 Bump internal deps 
These have been checked with the various owners to ensure they should be
fine.
 2023-05-23 12:41:10 -04:00
Jim 2e29894ca7 chore: upgrade deps (#3055) 2023-03-08 10:00:25 -05:00
Jim a2692e0a68 update the deps (#3054) 2023-03-03 20:51:51 -05:00
Jeff Mitchell 3b44c2578b Upgrade sdk configutil dep 2022-12-06 16:47:08 -05:00
Johan Brandhorst-Satzkorn aef9073fa6 Upgrade to Go 1.19 (#2347) 2022-08-25 12:12:24 -04:00
Jeff Mitchell 7df1331e93 Update configutil/pluginutil deps (#2346) 
Fixes #2343
 2022-08-10 16:32:02 -04:00
Jeff Mitchell b8eb87561c Update configutil dependency in sdk 2022-06-28 19:55:39 -04:00
Jeff Mitchell 957fe19846 Bump to Go 1.18 (#2036) 2022-05-04 12:14:00 -04:00
Jeff Mitchell 7eb29261b2 Update to go-kms-wrapping version 2, and plugin-based KMS (#1901) 2022-03-16 17:04:07 -04:00
Todd Knight 884e1f2d18 Merge branch 'main' into plugin-hostcatalogs 
# Conflicts:
#	go.mod
#	sdk/go.mod
 2021-11-12 08:55:17 -07:00
Jeff Mitchell 0ea3ff03c4 Update SDK go.mod to require Go 1.17 2021-11-10 15:09:55 -05:00
Jim b96f57ec4e fix (events): Only "sign" audit events (#1677) 
* chore: Update eventlogger dependency.

We need the latest version, so we can limit the type of events
that are signed.

* fix (events): Only "sign" audit events
 2021-11-08 13:29:16 -05:00
Jeff Mitchell 48ac8b8f0b Merge branch 'main' into plugin-hostcatalogs 2021-11-07 18:47:28 -05:00
Jim eecd878b36 feature: Add signing (hmac-sha256) of audit entries (#1666) 2021-11-05 20:44:33 -04:00
Jeff Mitchell 80d41b9044 Merge branch 'main' into plugin-hostcatalogs 2021-11-04 09:02:39 -04:00
Jim 8ae6e9892f feature (events/audit): Add auth info to audit events (#1644) 2021-10-28 21:14:39 -04:00
Jeff Mitchell b1a72bd445 Merge remote-tracking branch 'origin/main' into plugin-hostcatalogs 2021-10-27 21:57:30 -04:00
Jim a679300b50 feature (events): Classify auth method request/resp messages for audit events. (#1640) 
* refactor (oidc): Stop emitting error for not found token id

Stop emitting errors when authtoken repo.IssueAuthToken is called and
there's if no pending token.  It's not an "normal" state and not
an error condition.

* feature (audit tagging): Add tags for auth method requests/responses

Including testing functions for asserting audit events created
when a service is called
 2021-10-27 09:37:14 -04:00
Jeff Mitchell 1c8e0ed1e1 Add scaffolding for external host plugins and convert aws/azure over (#1581) 2021-10-14 11:56:08 -04:00
Jeff Mitchell 158ab09952 Merge branch 'main' into plugin-hostcatalogs 2021-10-05 16:27:28 -04:00
Jim c8b29ded1c Events: Add outbound detail protobufs, request status code, and update event encrypt filter. (#1569) 
* feat (events): Add status code to audit events

* feat (events): Add the resp proto msg to every audit event

* chore (events): Update eventlogger dep

This latest version will redact any map and/or map field which isn't
explicitly classified via a Taggable interface

* feat (events): Begin to add tagging to response proto msgs
 2021-09-30 12:55:47 -04:00
Chris Marchesi 8b8f5de120 sdk: update grpc (#1538) 2021-09-24 13:55:19 -07:00
Jeff Mitchell e9a8ede0d6 Move wrapper package back to SDK (#1511) 
TF uses this, so SDK is a decent place for it. It doesn't create
dependencies between it and API.
 2021-09-08 12:15:42 -04:00
Jeff Mitchell 081de3cf79 Migrate sdk/recovery to api/ and sdk/wrapper to internal (#1507) 
* `recovery` is only used by the API (and the main module, for decryption)
* `wrapper` is only used by the CLI right now

Moving these brings them closer to the code that uses them, and makes
the SDK package a bit more clear in terms of functionality.
 2021-09-07 22:13:19 -04:00
Jeff Mitchell b0dbd0182e Add support for additional awskms parameters (#1468) 
This updates to the latest go-kms-wrapping tag to support these
parameters and documents them.
 2021-08-18 12:45:20 -04:00
Jeff Mitchell b80607ff46 Update against updated go-secure-stdlib 2021-07-14 17:21:48 -07:00
Jeff Mitchell 2cbcf9a563 Update usage of shared-secure-libs (#1393) 2021-07-12 21:06:22 -04:00
Jeff Mitchell 6b3bad278f Update SDK deps 2021-03-09 08:31:27 -05:00
Jeff Mitchell c44589b116 Fix bad dep 2020-10-07 14:15:32 -04:00
Jeff Mitchell a1949da18c Remove module deps for the moment 2020-10-07 14:09:55 -04:00
Jeff Mitchell 61dd20e421 Add SDK go mod init 2020-10-07 13:54:53 -04:00