20240920

.batect/agent_deco.sh

@@ -0,0 +1,18 @@
+#!/usr/bin/env sh
+
+######################################################################
+# @author      : bidaya0 (bidaya0@$HOSTNAME)
+# @file        : agent_deco
+# @created     : 星期二 1月 25, 2022 18:17:45 CST
+#
+# @description : 
+######################################################################
+
+
+
+if [ "$PYTHONAGENT" = "TRUE" ]; then
+	curl -X GET "${DONGTAI_IAST_BASE_URL}/api/v1/agent/download?url=${DONGTAI_IAST_BASE_URL}&language=python&projectName=${PROJECT_NAME}" -H "Authorization: Token ${DONGTAI_AGNET_TOKEN}" -o dongtai-agent-python.tar.gz -k
+	pip install dongtai-agent-python.tar.gz
+fi
+
+sh $@

.batect/manage_run_server.sh

@@ -0,0 +1,11 @@
+#!/usr/bin/env sh
+
+######################################################################
+# @author      : bidaya0 (bidaya0@$HOSTNAME)
+# @file        : manage_run_server
+# @created     : 星期二 1月 25, 2022 10:39:21 CST
+#
+# @description : 
+######################################################################
+
+python manage.py runserver 0.0.0.0:8000

.batect/manage_test.sh

@@ -0,0 +1,11 @@
+#!/usr/bin/env sh
+
+######################################################################
+# @author      : bidaya0 (bidaya0@$HOSTNAME)
+# @file        : manage_run_server
+# @created     : 星期二 1月 25, 2022 10:39:21 CST
+#
+# @description : 
+######################################################################
+
+python manage.py test 

.dockerignore

@@ -1,6 +1,45 @@
 /venv
 /*.docx
+*.DS_Store
+/venv
+*/__pycache__/*
+*/migrations/*
+*.pyc
+.idea/
+scaapi/cron/logs/sca.log
+*.docx
+db/*
+#Dockerfile
+doc/*
+doc/example.json
+conf/config.ini
+logs/*.log
+build_docker.sh
+dongtai_py_agent.log
+/venv
+/*.docx
 .git
 .idea
 /logs/*.log
 build_docker.sh
+*.DS_Store
+/venv
+*/__pycache__/*
+*/migrations/*
+*.pyc
+.idea/
+scaapi/cron/logs/sca.log
+iast/upload/reports/*
+db/*
+conf/config.ini
+#Dockerfile
+doc
+doc/example.json
+logs/*.log
+build_docker.sh
+iast-package
+config.ini
+/venv
+/*.docx
+.git
+.idea

.github/CODE_OF_CONDUCT.md

@@ -0,0 +1,3 @@
+# DongTai Community Code of Conduct
+
+This project follows the [CNCF Code of Conduct](https://github.com/cncf/foundation/blob/master/code-of-conduct.md).

.github/ISSUE_TEMPLATE/bug_report.yaml

@@ -0,0 +1,83 @@
+name: 🐛 Bug report
+description: Report a bug to help us improve DongTai
+title: "[Bug]: "
+labels: [bug]
+assignees:
+  - exexute
+body:
+- type: markdown
+  attributes:
+    value: |
+      Thank you for submitting a bug report!
+
+      Please fill out the template below to make it easier to debug your problem.
+
+      If you are not sure if it is a bug or not, you can contact us via the available [support channels](https://github.com/HXSecurity/DongTai/issues/new/choose).
+- type: checkboxes
+  attributes:
+    label: Preflight Checklist
+    description: Please ensure you've completed all of the following.
+    options:
+      - label: I agree to follow the [Code of Conduct](https://github.com/HXSecurity/DongTai/blob/main/.github/CODE_OF_CONDUCT.md) that this project adheres to.
+        required: true
+      - label: I have searched the [issue tracker](https://www.github.com/HXSecurity/DongTai/issues) for an issue that matches the one I want to file, without success.
+        required: true
+      - label: I am not looking for support or already pursued the available [support channels](https://github.com/HXSecurity/DongTai/issues/new/choose) without success.
+        required: true
+- type: input
+  attributes:
+    label: Version
+    description: What version of DongTai are you running?
+    placeholder: 1.0.0
+  validations:
+    required: true
+- type: dropdown
+  attributes:
+    label: Installation Type
+    description: How did you install DongTai?
+    options:
+      - Official SaaS Service
+      - Official Kubernetes
+      - Official Docker Compose
+      - Other (specify below)
+  validations:
+    required: true
+- type: dropdown
+  attributes:
+    label: Service Name
+    description: Which service do you want to report the bug?
+    options:
+      - Doc(DongTai-Doc)
+      - Docker(DongTai-Base-Image)
+      - Deploy(DongTai-deploy)
+      - DongTai-Web
+      - DongTai-WebAPI
+      - DongTai-OpenAPI
+      - DongTai-Engine
+      - DongTai-Core
+      - DongTai-agent-python
+      - DongTai-agent-java
+      - DongTai-agent-php
+    multiple: true
+  validations:
+    required: true
+- type: textarea
+  attributes:
+    label: Describe the details of the bug and the steps to reproduce it
+    description: Steps to reproduce the behavior if it is not self-explanatory.
+    placeholder: |
+      1. In this environment...
+      2. With this config...
+      3. Do something...
+      4. See error...
+  validations:
+    required: true
+- type: textarea
+  attributes:
+    label: Additional Information
+    description: Links? References? Anything that will give us more context about the issue that you are encountering!
+- type: textarea
+  attributes:
+    label: Logs
+    description: Dex application logs (if relevant).
+    render: shell

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,9 @@
+blank_issues_enabled: false
+contact_links:
+  - name: ❓ Ask a question
+    url: https://github.com/HXSecurity/DongTai/discussions/new?category=q-a
+    about: Ask and discuss questions with other DongTai community members
+
+  - name: 📚 Documentation
+    url: https://hxsecurity.github.io/DongTaiDoc
+    about: Check the documentation for help

.github/ISSUE_TEMPLATE/feature_request.yaml

@@ -0,0 +1,44 @@
+name: 🚀 Feature request
+description: Suggest an idea for DongTai
+title: "[Feature]: "
+labels: [feature, ]
+assignees:
+  - exexute
+body:
+- type: markdown
+  attributes:
+    value: |
+      Thank you for submitting a feature request!
+
+      Please describe what you would like to change/add and why in detail by filling out the template below.
+
+      If you are not sure if your request fits into DongTai, you can contact us via the available [support channels](https://github.com/HXSecurity/DongTai/issues/new/choose).
+- type: checkboxes
+  attributes:
+    label: Preflight Checklist
+    description: Please ensure you've completed all of the following.
+    options:
+      - label: I agree to follow the [Code of Conduct](https://github.com/HXSecurity/DongTai/blob/main/.github/CODE_OF_CONDUCT.md) that this project adheres to.
+        required: true
+      - label: I have searched the [issue tracker](https://www.github.com/HXSecurity/DongTai/issues) for an issue that matches the one I want to file, without success.
+        required: true
+- type: textarea
+  attributes:
+    label: Problem Description
+    description: A clear and concise description of the problem you are seeking to solve with this feature request.
+  validations:
+    required: true
+- type: textarea
+  attributes:
+    label: Proposed Solution
+    description: A clear and concise description of what would you like to happen.
+  validations:
+    required: true
+- type: textarea
+  attributes:
+    label: Alternatives Considered
+    description: A clear and concise description of any alternative solutions or features you've considered.
+- type: textarea
+  attributes:
+    label: Additional Information
+    description: Add any other context about the problem here.

.github/deploy/deploy-dongtai-server-dev.yml

@@ -0,0 +1,159 @@
+---
+# dongtai-server服务
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: dongtai-server
+  namespace: iast-dev
+  annotations:
+    kubesphere.io/description: dongtai-server
+  labels:
+    app: dongtai-server
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: dongtai-server
+  template:
+    metadata:
+      labels:
+        app: dongtai-server
+    spec:
+      containers:
+        - name: dongtai-server-container
+          image: registry.cn-beijing.aliyuncs.com/secnium/dongtai-server-dev:VERSION
+          imagePullPolicy: Always
+          volumeMounts:
+            - name: configfile
+              mountPath: /opt/dongtai/webapi/conf/config.ini
+              subPath: config.ini
+          resources:
+            limits:
+              cpu: "500m"
+              memory: 1000Mi
+            requests:
+              cpu: "500m"
+              memory: 1000Mi
+      volumes:
+        - name: configfile
+          configMap:
+            name: dongtai-iast-config.ini
+      imagePullSecrets:
+        - name: aliyun-registry-secret
+---
+# dongtai-web服务
+apiVersion: v1
+kind: Service
+metadata:
+  name: dongtai-server-svc
+  namespace: iast-dev
+spec:
+  ports:
+    - port: 80
+      protocol: TCP
+      targetPort: 8000
+  selector:
+    app: dongtai-server
+  type: ClusterIP
+---
+# dongtai-engine服务
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: dongtai-engine
+  namespace: iast-dev
+  annotations:
+    kubesphere.io/description: dongtai-engine
+  labels:
+    app: dongtai-engine
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: dongtai-engine
+  template:
+    metadata:
+      labels:
+        app: dongtai-engine
+    spec:
+      containers:
+        - name: dongtai-engine-container
+          image: registry.cn-beijing.aliyuncs.com/secnium/dongtai-server-dev:VERSION
+          command: [ "/bin/sh","/opt/dongtai/webapi/docker/entrypoint.sh" ]
+          args: [ "worker" ]
+          imagePullPolicy: Always
+          volumeMounts:
+            - name: configfile
+              mountPath: /opt/dongtai/webapi/conf/config.ini
+              subPath: config.ini
+          resources:
+            limits:
+              cpu: "500m"
+              memory: 1000Mi
+            requests:
+              cpu: "500m"
+              memory: 1000Mi
+      volumes:
+        - name: configfile
+          configMap:
+            name: dongtai-iast-config.ini
+      imagePullSecrets:
+        - name: aliyun-registry-secret
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: dongtai-engine-svc
+  namespace: iast-dev
+spec:
+  ports:
+    - port: 80
+      protocol: TCP
+      targetPort: 8000
+  selector:
+    app: dongtai-engine
+  type: ClusterIP
+---
+#dongtai-engine-task服务
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: dongtai-engine-task
+  namespace: iast-dev
+  annotations:
+    kubesphere.io/description: dongtai-engine-task
+  labels:
+    app: dongtai-engine-task
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: dongtai-engine-task
+  template:
+    metadata:
+      labels:
+        app: dongtai-engine-task
+    spec:
+      containers:
+        - name: dongtai-engine-task-container
+          image: registry.cn-beijing.aliyuncs.com/secnium/dongtai-server-dev:VERSION
+          command: [ "/bin/bash","/opt/dongtai/webapi/docker/entrypoint.sh" ]
+          args: [ "beat" ]
+          imagePullPolicy: Always
+          volumeMounts:
+            - name: configfile
+              mountPath: /opt/dongtai/webapi/conf/config.ini
+              subPath: config.ini
+          resources:
+            limits:
+              cpu: "500m"
+              memory: 1000Mi
+            requests:
+              cpu: "500m"
+              memory: 1000Mi
+      volumes:
+        - name: configfile
+          configMap:
+            name: dongtai-iast-config.ini
+      imagePullSecrets:
+        - name: aliyun-registry-secret