Merge branch 'main' into main

code-scanning/anchore.yml

@@ -40,6 +40,7 @@ jobs:
       with:
         image: "localbuild/testimage:latest"
         acs-report-enable: true
+        fail-build: false
     - name: Upload Anchore Scan Report
       uses: github/codeql-action/upload-sarif@v2
       with:

code-scanning/properties/pyre.properties.json

@@ -0,0 +1,7 @@
+{
+    "name": "Pyre",
+    "creator": "Meta",
+    "description": "Pyre is a performant type checker for Python compliant with PEP 484. Pyre can analyze codebases with millions of lines of code incrementally – providing instantaneous feedback to developers as they write code.",
+    "iconName": "pyre",
+    "categories": ["Code Scanning", "Python"]
+}

code-scanning/properties/pysa.properties.json

@@ -0,0 +1,7 @@
+{
+    "name": "Pysa",
+    "creator": "Meta",
+    "description": "Python Static Analyzer (Pysa) is a security-focused static analysis tool that tracks flows of data from where they originate to where they terminate in a dangerous location.",
+    "iconName": "pysa",
+    "categories": ["Code Scanning", "Python"]
+}

code-scanning/pyre.yml

@@ -0,0 +1,46 @@
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
+# This workflow integrates Pyre with GitHub's
+# Code Scanning feature.
+#
+# Pyre is a performant type checker for Python compliant with
+# PEP 484. Pyre can analyze codebases with millions of lines
+# of code incrementally – providing instantaneous feedback
+# to developers as they write code.
+#
+# See https://pyre-check.org
+
+name: Pyre
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ $default-branch, $protected-branches ]
+  pull_request:
+    branches: [ $default-branch ]
+
+permissions:
+    contents: read
+
+jobs:
+  pyre:
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          submodules: true
+
+      - name: Run Pyre
+        uses: facebook/pyre-action@60697a7858f7cc8470d8cc494a3cf2ad6b06560d
+        with:
+          # To customize these inputs:
+          # See https://github.com/facebook/pyre-action#inputs
+          repo-directory: './'
+          requirements-path: 'requirements.txt'

code-scanning/pysa.yml

@@ -0,0 +1,50 @@
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
+# This workflow integrates Python Static Analyzer (Pysa) with
+# GitHub's Code Scanning feature.
+#
+# Python Static Analyzer (Pysa) is a security-focused static
+# analysis tool that tracks flows of data from where they
+# originate to where they terminate in a dangerous location.
+#
+# See https://pyre-check.org/docs/pysa-basics/
+
+name: Pysa
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ $default-branch, $protected-branches ]
+  pull_request:
+    branches: [ $default-branch ]
+  schedule:
+    - cron: $cron-weekly
+
+permissions:
+    contents: read
+
+jobs:
+  pysa:
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          submodules: true
+
+      - name: Run Pysa
+        uses: facebook/pysa-action@f46a63777e59268613bd6e2ff4e29f144ca9e88b
+        with:
+          # To customize these inputs:
+          # See https://github.com/facebook/pysa-action#inputs
+          repo-directory: './'
+          requirements-path: 'requirements.txt'
+          infer-types: true
+          include-default-sapp-filters: true

icons/pyre.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 82.43 136.01"><defs><style>.cls-1{fill:#543d3b;}.cls-2{fill:url(#linear-gradient);}.cls-3{fill:url(#linear-gradient-2);}</style><linearGradient id="linear-gradient" x1="37.48" y1="110.89" x2="67.2" y2="6.42" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#feb800"/><stop offset="1" stop-color="#ff4300"/></linearGradient><linearGradient id="linear-gradient-2" x1="-4.59" y1="95.33" x2="24.09" y2="-5.5" xlink:href="#linear-gradient"/></defs><title>Asset 1</title><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><polygon class="cls-1" points="25.77 58.16 0.58 58.16 29.52 97.91 1.79 136.01 26.97 136.01 42.11 115.21 57.24 136.01 82.43 136.01 25.77 58.16"/><path class="cls-2" d="M66,21.63a24.17,24.17,0,0,1-6.82,17.5A5.94,5.94,0,0,1,57.6,38c-9.18-9.8-5.53-38-5.53-38C33.71,21.13,32.63,41,32.63,45.41c-.11,2.7.25,12.19,9.11,24L56.8,90.25l.12-.09C59.34,88.33,97,58.94,66,21.63Z"/><path class="cls-3" d="M22.41,38.65l0-.08a11.26,11.26,0,0,0-2.13-3.73l-.06-.07h0C9.46,21.85,18,9,18,9,4.52,15.63.84,27.17.07,35.51h0C-.72,47.25,3.81,51.38,7.44,52.83a11.92,11.92,0,0,0,4.21.76c5.13-.15,8.26-2.61,9.81-5.24a12.09,12.09,0,0,0,1.11-9.15C22.52,39,22.47,38.83,22.41,38.65Z"/></g></g></svg>

icons/pysa.svg

@@ -0,0 +1 @@
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 347.36 500"><defs><style>.cls-1{fill:url(#linear-gradient);}</style><linearGradient id="linear-gradient" x1="173.25" y1="41.97" x2="173.25" y2="456.38" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#ff4602"/><stop offset="1" stop-color="#ff9a00"/></linearGradient></defs><path class="cls-1" d="M304,226.54a201,201,0,0,1-7.73,55,160.34,160.34,0,0,1-26.61,52.85l-.48.8L170.37,456.38l-20.66-13.77-2.27-1.49c-.64-.42-1.6-1.05-2.44-1.69-18.48-13.35-28.56-29.05-29.94-46.7-1.77-22.85,13.89-49.56,39.45-75.38l-1.31,35.42,19.8,1,2.77-67.85-71.49-3.2-1,19.79,35.32,1.76L127,315.38a173.75,173.75,0,0,0-43.63,62.67C59.52,345.13,45.88,309.45,42.79,272a223.82,223.82,0,0,1,.59-31.44,216.65,216.65,0,0,1,12.56-55.75,223,223,0,0,1,37-64.37,175,175,0,0,1,22.83-23.62l5-4.52-1.92,6.22c-9.24,30.21-5.13,64.49,9.59,79.76,7.72,8.07,17.65,10.59,29.5,7.43,28.54-7.5,37.27-36.5,39.93-53.12a122.78,122.78,0,0,0,.16-35.19,114.15,114.15,0,0,0-3.19-16.22c-2.67-10.28-6.29-19.28-10.47-26A90.72,90.72,0,0,0,175.36,42a110.14,110.14,0,0,1,21,9.65,113.61,113.61,0,0,1,54.73,105c-1.93,30.42-16.95,59.86-41.22,80.8l-3.42,2.87,1.5-35.29-20.26-1.2-3.23,72.66,71,3,.78-19.83-35.7-1.16L233.23,247a170.28,170.28,0,0,0,54-99.79c1.39,3.14,2.76,6.47,4.08,9.95A195.93,195.93,0,0,1,304,226.54Z"/></svg>