Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support Suppressions in Analysis Specification File #2

Merged
merged 2 commits into from
Nov 8, 2019

Conversation

nhakmiller
Copy link
Contributor

Background

Allow a Suppressions field in the analysis configurations file in order to support managing suppressions in code.

Changes

  • Modified SPEC_SCHEMA schema definition

Testing

  • Unit tests
  • Used on internal policies/rules to verify correctness

@@ -28,7 +28,7 @@ install:
pipenv install

unit:
nosetests -v
pipenv run nosetests -v
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Any reason to add this? pipenv is actually called in the ci task

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Using the unit make target directly fails without this, whereas other make targets such as make fmt, make integration, and make lint do not. I don't feel strongly about this, it just seemed weird that it was the only make target that must be run with pipenv run to not error. Should I revert?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CI seemed to be unaffected, so it's fine to leave!

@nhakmiller nhakmiller merged commit b6b91ba into master Nov 8, 2019
@nhakmiller nhakmiller deleted the nhakmiller-suppressions branch November 8, 2019 21:07
lindsey-w pushed a commit that referenced this pull request Sep 24, 2020
* updated the installation instructions

* tweaked wording
kbroughton referenced this pull request in kbroughton/panther-analysis Jul 22, 2022
natezpanther pushed a commit that referenced this pull request Jan 6, 2023
nkulig pushed a commit that referenced this pull request Jan 9, 2023
natezpanther added a commit that referenced this pull request Jan 25, 2023
* T1499:TA0040 Endpoint DoS Query + Detection

* Fixing the linter

* Linter fix #2

* Linter fix #3

* Linter fix #4

* Linter fix #5

* Linter Fix #6

* Added highest_count dictionary to reduce false positives

* Fixing get_key()

* Disabling detection prior to merge

Co-authored-by: Nate Zemanek <natezemanek@US-ML40NMGH9Q.localdomain>
Co-authored-by: Nate Zemanek <natezemanek@US-ML40NMGH9Q.local>
melenevskyi pushed a commit that referenced this pull request Dec 12, 2023
* Sorted testing (#1)

Add command-line argument sort-test-results to panther_analysis_tool
When set,sort-test-results will bucket test results output by passed/errored status, and will sort test cases by Rule ID

* Minor updates - rename variable, conditional print (#2)

* Print passed tests first, followed by failed

* Sort tests by Rule ID

* Add container

* Add container

* Add container

* Add logic to print organized output when a results container is passed.

* Add container

* Update version

* Update version

* Update version

* Update version

* Update version

* Update version

* Update version

* Update version

* Update version

* Update version

* Update version

* Update version

* Update version

* Update version

* Update version

* Update version

* Update version

* Update version

* Update version

* Update version

* Update version

* Update version

* rename variable. Only print detection ID in setup_run_tests when not sorting test results

* Conditionally print blank lines (#3)

* Conditionally print blank line

* Conditionally print blank line

* Use implied bool arg (#4)

* Conditionally print blank line

* Conditionally print blank line

* Update arg implementation

* Update arg implementation

* Apply diff from Panther (#5)

* Apply diff from panther

* Lint with black (#6)

* lint with black

---------

Co-authored-by: Chris Dzombak <chris@chrisdzombak.net>
Co-authored-by: Evan Gibler <evan.gibler@panther.com>
egibs pushed a commit that referenced this pull request Dec 15, 2023
* Add Workflow to upload on merge to main

* Update job names
egibs pushed a commit that referenced this pull request Dec 15, 2023
* Add Workflow to upload on merge to main

* Update job names
egibs pushed a commit that referenced this pull request Dec 15, 2023
* Add validate Workflow; separate lint and test checks (#1)

* Add Workflow to upload on merge to main (#2)

* Add Workflow to upload on merge to main

* Update job names

* Update validate and upload step names (#3)

* Update Validate Workflow name

* Small tweaks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants