From b1b210dda775c1fd58c9eb2efe97d010abcaa6c5 Mon Sep 17 00:00:00 2001 From: Anthony Sides <96399465+Silencer2333@users.noreply.github.com> Date: Mon, 7 Mar 2022 10:04:27 -0500 Subject: [PATCH 1/4] anthony sides Read me --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 715c2d4fda08..7349f277506d 100644 --- a/README.md +++ b/README.md @@ -50,7 +50,7 @@ In addition to the README you're reading right now, this repo includes other REA - [stylesheets/README.md](stylesheets/README.md) - [tests/README.md](tests/README.md) -## License +## License . mit license Anthonysides hackable text editor, october 2021 The GitHub product documentation in the assets, content, and data folders are licensed under a [CC-BY license](LICENSE). From 975db4cd0e56629a5d1772e00b772597496c8471 Mon Sep 17 00:00:00 2001 From: Premiermoney <286675216+Premiermoney@users.noreply.github.com> Date: Wed, 27 May 2026 00:42:07 -0400 Subject: [PATCH 2/4] Create fortify.yml --- .github/workflows/fortify.yml | 129 ++++++++++++++++++++++++++++++++++ 1 file changed, 129 insertions(+) create mode 100644 .github/workflows/fortify.yml diff --git a/.github/workflows/fortify.yml b/.github/workflows/fortify.yml new file mode 100644 index 000000000000..a78c9d6be941 --- /dev/null +++ b/.github/workflows/fortify.yml @@ -0,0 +1,129 @@ +# This workflow uses actions that are not certified by GitHub. +# They are provided by a third-party and are governed by +# separate terms of service, privacy policy, and support +# documentation. + +################################################################################################################################################ +# Fortify Application Security provides your team with solutions to empower DevSecOps practices, enable cloud transformation, and secure your # +# software supply chain. To learn more about Fortify, start a free trial or contact our sales team, visit fortify.com. # +# # +# Use this starter workflow as a basis for integrating Fortify Application Security Testing into your GitHub workflows. This template # +# demonstrates the steps to package the code+dependencies, initiate a scan, and optionally import SAST vulnerabilities into GitHub Security # +# Code Scanning Alerts. Additional information is available in the workflow comments and the Fortify AST Action / fcli / Fortify product # +# documentation. If you need additional assistance, please contact Fortify support. # +################################################################################################################################################ + +name: Fortify AST Scan + +# Customize trigger events based on your DevSecOps process and/or policy +on: + push: + branches: [ "main" ] + pull_request: + # The branches below must be a subset of the branches above + branches: [ "main" ] + schedule: + - cron: '34 21 * * 4' + workflow_dispatch: + +jobs: + Fortify-AST-Scan: + # Use the appropriate runner for building your source code. Ensure dev tools required to build your code are present and configured appropriately (MSBuild, Python, etc). + runs-on: ubuntu-latest + permissions: + actions: read + contents: read + security-events: write + # pull-requests: write # Required if DO_PR_COMMENT is set to true + + steps: + # Check out source code + - name: Check Out Source Code + uses: actions/checkout@v4 + + # Perform SAST and/or SCA scan via Fortify on Demand/Fortify Hosted/ScanCentral SAST/Debricked. Based on + # configuration, the Fortify GitHub Action can optionally set up the application version/release, generate + # job summaries and Pull Request comments, and/or export SAST results to the GitHub code scanning dashboard. + # The Fortify GitHub Action provides many customization capabilities, but in case further customization is + # required, you can use sub-actions like fortify/github-action/setup@v1 to set up the various Fortify tools + # and run them directly from within your pipeline. It is recommended to review the Fortify GitHub Action + # documentation at https://github.com/fortify/github-action#readme for more information on the various + # configuration options and available sub-actions. + - name: Run Fortify Scan + # Specify Fortify GitHub Action version to run. As per GitHub starter workflow requirements, this example + # uses the commit id corresponding to version 1.6.2. It is recommended to check whether any later releases + # are available at https://github.com/fortify/github-action/releases. Depending on the amount of stability + # required, you may want to consider using fortify/github-action@v1 instead to use the latest 1.x.y version + # of this action, allowing your workflows to automatically benefit from any new features and bug fixes. + uses: fortify/github-action@ef5539bf4bd9c45c0bd971978f635a69eae55297 + with: + sast-scan: true # Run a SAST scan; if not specified or set to false, no SAST scan will be run + debricked-sca-scan: true # For FoD, run an open-source scan as part of the SAST scan (ignored if SAST scan + # is disabled). For SSC, run a Debricked scan and import results into SSC. + env: + ############################################################# + ##### Fortify on Demand configuration + ##### Remove this section if you're integrating with Fortify Hosted/Software Security Center (see below) + ### Required configuration + FOD_URL: https://ams.fortify.com # Must be hardcoded or configured through GitHub variable, not secret + FOD_TENANT: ${{secrets.FOD_TENANT}} # Either tenant/user/password or client id/secret are required; + FOD_USER: ${{secrets.FOD_USER}} # these should be configured through GitHub secrets. + FOD_PASSWORD: ${{secrets.FOD_PAT}} + # FOD_CLIENT_ID: ${{secrets.FOD_CLIENT_ID}} + # FOD_CLIENT_SECRET: ${{secrets.FOD_CLIENT_SECRET}} + ### Optional configuration + # FOD_LOGIN_EXTRA_OPTS: --socket-timeout=60s # Extra 'fcli fod session login' options + # FOD_RELEASE: MyApp:MyRelease # FoD release name, default: /: + # DO_SETUP: true # Setup FoD application, release & static scan configuration + # SETUP_ACTION: # Customize setup action + # Pass extra options to setup action: + # SETUP_EXTRA_OPTS: --copy-from "${{ github.repository }}:${{ github.event.repository.default_branch }}" + # PACKAGE_EXTRA_OPTS: -oss -bt mvn # Extra 'scancentral package' options + # FOD_SAST_SCAN_EXTRA_OPTS: # Extra 'fcli fod sast-scan start' options + # DO_WAIT: true # Wait for successful scan completion (implied if post-scan actions enabled) + # DO_POLICY_CHECK: true # Fail pipeline if security policy outcome is FAIL + # POLICY_CHECK_ACTION: # Customize security policy checks + # POLICY_CHECK_EXTRA_OPTS: --on-unsigned=ignore # Pass extra options to policy check action + # DO_JOB_SUMMARY: true # Generate workflow job summary + # JOB_SUMMARY_ACTION: # Customize job summary + # JOB_SUMMARY_EXTRA_OPTS: --on-unsigned=ignore # Pass extra options to job summary action + # DO_PR_COMMENT: true # Generate PR comments, only used on pull_request triggers + # PR_COMMENT_ACTION: # Customize PR comments + # PR_COMMENT_EXTRA_OPTS: --on-unsigned=ignore # Pass extra options to PR comment action + # DO_EXPORT: true # Export vulnerability data to GitHub code scanning dashboard + # EXPORT_ACTION: # Customize export action + # EXPORT_EXTRA_OPTS: --on-unsigned=ignore # Pass extra options to export action + # TOOL_DEFINITIONS: # URL from where to retrieve Fortify tool definitions + + ############################################################# + ##### Fortify Hosted / Software Security Center & ScanCentral + ##### Remove this section if you're integrating with Fortify on Demand (see above) + ### Required configuration + SSC_URL: ${{vars.SSC_URL}} # Must be hardcoded or configured through GitHub variable, not secret + SSC_TOKEN: ${{secrets.SSC_TOKEN}} # SSC CIToken; credentials should be configured through GitHub secrets + SC_SAST_TOKEN: ${{secrets.SC_CLIENT_AUTH_TOKEN}} # ScanCentral SAST client_auth_token, required if SAST scan is enabled + DEBRICKED_TOKEN: ${{secrets.DEBRICKED_TOKEN}} # Debricked token, required if Debricked scan is enabled + SC_SAST_SENSOR_VERSION: 24.4.0 # Sensor version to use for the scan, required if SAST scan is enabled + ### Optional configuration + # SSC_LOGIN_EXTRA_OPTS: --socket-timeout=60s # Extra 'fcli ssc session login' options + # SC_SAST_LOGIN_EXTRA_OPTS: --socket-timeout=60s # Extra 'fcli sc-sast session login' options + # SSC_APPVERSION: MyApp:MyVersion # SSC application version name, default: /: + # DO_SETUP: true # Set up SSC application & version + # SETUP_ACTION: # Customize setup action + # SETUP_EXTRA_OPTS: --on-unsigned=ignore # Pass extra options to setup action + # PACKAGE_EXTRA_OPTS: -bt mvn # Extra 'scancentral package' options + # EXTRA_SC_SAST_SCAN_OPTS: # Extra 'fcli sc-sast scan start' options + # DO_WAIT: true # Wait for successful scan completion (implied if post-scan actions enabled) + # DO_POLICY_CHECK: true # Fail pipeline if security policy outcome is FAIL + # POLICY_CHECK_ACTION: # Customize security policy checks + # POLICY_CHECK_EXTRA_OPTS: --on-unsigned=ignore # Pass extra options to policy check action + # DO_JOB_SUMMARY: true # Generate workflow job summary + # JOB_SUMMARY_ACTION: # Customize job summary + # JOB_SUMMARY_EXTRA_OPTS: --on-unsigned=ignore # Pass extra options to job summary action + # DO_PR_COMMENT: true # Generate PR comments, only used on pull_request triggers + # PR_COMMENT_ACTION: # Customize PR comments + # PR_COMMENT_EXTRA_OPTS: --on-unsigned=ignore # Pass extra options to PR comment action + # DO_EXPORT: true # Export vulnerability data to GitHub code scanning dashboard + # EXPORT_ACTION: # Customize export action + # EXPORT_EXTRA_OPTS: --on-unsigned=ignore # Pass extra options to export action + # TOOL_DEFINITIONS: # URL from where to retrieve Fortify tool definitions From be60555af99e544af67f455e292282708de3bb8b Mon Sep 17 00:00:00 2001 From: Premiermoney <286675216+Premiermoney@users.noreply.github.com> Date: Wed, 27 May 2026 00:58:43 -0400 Subject: [PATCH 3/4] Add files via upload --- github-main.zip | Bin 0 -> 6392 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 github-main.zip diff --git a/github-main.zip b/github-main.zip new file mode 100644 index 0000000000000000000000000000000000000000..9a259077075ab8dd8a95a0a2b9144930787672dd GIT binary patch literal 6392 zcma)=byOAI+Q1LpaOiFcB@c}V(%s!s=K#_z(j7{N(kTdnNOw1fl1A##A<~_n-uJ%O z?|OBucV_LG{m=7z_RKubthIlt3J8ekfFH+|JD>i)CjY)*0nh;Kme#ITZf0zDrq=cx zTAD}zxECIAma2b@A^bJw-++G-``}NpavB<1QqMG{lvEYPG^PF*h5E0hgNKW|;ot#) z2gm>b>pw)9xmmJ%n%dd^=gF!Q#bU-qF+=um30v01S=!4ffS+hegC#?>9Yw9C`|F0@ zC!}z$${9pZ$7EPkA`#|jelcJ?tZdzE>N1zGVP0IPlzc9+W@gH)^|{72=nWHfDZME3 z2s%ab+89|2v2*Q3IdhO;DX{`f<3lsqYcG847F__1OBEO*ZzBljx>Yf8qkqQa-$-^# zrA*t&Cpn{Ud5b;zwT{r1!j$g4`1oTp_>Xc>ve?6Az{57NO!?};Hp*tzHWI~;Yk19Z z?lN|i?FEU})j&xb#Mq1obp9hQN>ch|hQ-C=iFu!wKF9C29B%6~)9y5}9UC5eU0y#T zd~l@Ll3S&oG*g4D#dQ{S!aXM|-U%9)l4dPG;r>W5zeva#62~Hge_@`iIK+=*wkDWxb$UVo>&@WMxA`#{G`|S z_6?AaSt2a^336XD-c=#dq$fr|i6NhlYDSRs&M8J*lN&(-k*w!R_>{|-B3}-DID)b~(NvAG@IdhtW%)ADQ8V1;-2(;E}uP5`mC$^OKg^Bmfz^A zv0rf!_AKelwPUQqA^+c{{Z~y@Yp{+DzvGmYMZ$$*^ed2l%`xz2%Z!q?B$Jn;!vDw8iMR zFoO=gbaVjBcy)5(PVWfYufutfUJ4gGWUw`2gW1p#U>4oVJY^m%~tb~!b9!DX<9Cx*z^*QY54E`Vefr@r>AA`YS`{ zRC@}S1k|9EwGEE!kg#4)!X<%Gvb_xfx{Z)QJ4%P~ax7h!Q&7dm`913>$uM)3PLHD( zyszu|dits@#)8<@O~nb?8yUEIile!RW|gTn*p07|j>CT!NE4!wmn{weV8jXl5d2yo zigFTC${JGt`ME6U8@SB%5c-~%%{UimSR)r?@K}>?MwG9GmP%Ml*4r~CgfV=gsYU+O z$4(P@dn){p%PO| zW-EKwk_ErK7w}oD@9j{+EBDUPR?pMttxF>ecHI2#*Tu`F^B;)o4(_h@3afQXK6cHe zO->&9dRFSc^5FMa>AY$HdQ8`P@as@7u1q5dyHy)5EwTAs_%Fr!mu;-bPd1DrFmG;f zH1To!<)%0a&GO`GRp29}yQiMuB;E9o3QQX^-PE<`uga!}$;zHnQXTCPlT51LHF zZ6zLyK(EzInxW{@PhwqTiFFvNTZq^XE?N!>-Bc8;DJG9T)~B!p zkYtiWg)JW4Ijno@@MQ!lSZg-ZFVue zF&pVET;{16<`Wp<#K7T{$!L3O0dTDNAcyuH#uF@GA$LMn7Nxn=VTB`{$Yv^c)-e9` zR~|j_RJT@M2)GF)WRz6iJjdz~R{|#X69x`mFEEB<77|AeUc;&%u^DG>BFxo$SYbJ< z4_>>fBEcYJxYK7rcdyATWM-d$lDbLdT0TC*08$1@6&(mcR_YVBFZ4>({7P0b%VLnb z^~&Md{at(ww+R)WH;@P09`GR#r%g$_o(5OaUK2%{nYYfFPI#QV{>GAfxC^PI+i!Lj zyytd-V|SGO0T-+n*BeHhO(kaVO%->vadKF#O(We2FV;X=+zzWTDK;?H_?uJysrKZ6 zzOHiXl*OS+os`WZESZEvt@ic?mb5rUI63CW+~Lx-WF9C_A8X)vVRFcj2WmX}s1;onaKsuzZ}?i`eUqdo{&l z>X>07PtRn`pJw=XP_;aWLJQ*@Q%B!or=Vv9qzzMlNFoIE2TerH^U&UN8$JRmfdC5I z5^~aps9VSo|1kQd@^>&(B}h`Ie{~2eLDeZ8I}EU+RwKNNi2?V8cF>bnq<+f_N$9CK z7caywrNr@Fi7$XfggF4&sd5#yO?Y^&Eo)K1j2y9>e=O(tv3xiBdD~XlmT5^xX`j(s zjOz?`4^k5UO62!&u_@ZZR?ZC4ptn7n5vnGp=ABHy<%M+11maLFWx;TQik9FZMF}}L z=!v$+Cuq@#%Ao*EQ&{d^oFZ++04HzuI=bt+*i?(fZBS)WK_M>CJ;%Iipm+n|IqE~# zX-A{asr-1h7z%U661A|=Q;%b=AR~=>nMI{;BQ4$#C3l?o^1n|*O zJk23&hidL+mJ$i7iD?#m11<8Szt#(Sn90cTO#53mYo_%E*r_?@6Xq*T1T-rwf2RQB znZD2!D+ebdnKkp>rc)${n7wNfW{5kPp*&GVD@!Ju6mH{@FswBnpC;Gd(Fq|DFCWan zqE74K81&o-ds)>*CWIkBpKLqJP9yFjeNpOOzF3oyj}DZ-KPx{Lt8YS2G&n$PiDKK;n&rb9fUf3QKe3BNzZH_(CH3o zn>ai?GRzoJ*0>0N)@vSydBeKij}?9~LuL2KJ$q1E>RnRbv09;lk0SQ0@>0HQeRmLhBP z3%FPb0S3+{V=R*tpfA8jsd~DP_wji1gApMCkgqpdNw0mm6Bo)XX4so*tphoPaxYE> z_)9t7^IK|rk_I+iIKe4%iYywVz+>O}HvLa@h|iZ~QBN+gwg%r#edf>9UGp(eKBgza z*AtmNR1{>gHAT4vxr~-dj@~{!7)D~%xb;UvX6pqq<1ug5(KZkWXYn3Wjk*DA5^y4Q zja9?1tTd+kjF{HY^S-n&OpUyHoen^RF~Fqk7#ukQM=^=0J%6b!)c-KS z1$$Yyoth1#1?<$cC5s5)3V}>m%3JZMM_k{gqD5{+phZAnYn|^>nf!?1RXt1uk zB6DDA^>rGT7FNmzwMVhB-$+6LC~h!5{3kC%*W(mo`8pu<{uJG~Tx1u1_$)_Nb{lwi zi1CC)gmgjqqtBDfIHn5%GQ+=mwSDBz88+@y5ZOkJtC8|i6W-%*DK9{}3|m!R@p_bJI-*p=gkz7F)FXm^?LoDpi%Dxm?HcCPv5*I?kqLiA8^u-bwiFK{ zfTrvjLWB%>MFR-~_$}F)gyxb8rGmd8V+rA*M~zCR5h-GNeK$Rk4ccV$p87~&OOvNIW-64VvV9w$SStG3WSn12iPTlGMwuv8GRaFj zY~O`53sEm~dK@ls)UAV*HDyi{PGz0kAYES%`QsaIu!6iwmx}<0cku6&F<48C{&{v3rpQ*weztaCJG%33{~CXT5{V_lUQq^#Q1nCgM1%6ZC2@RBx8# zYyW30v#Yw*Lz=LnMaC?Vd;ZdtLcM$l5hrV4kqx0ewdd^sW*zh5qN>jyK~nCtZY0OktXi#)NCFY?fH z`QGNRR*VaLQBxWkY*Wzc=Oo%Sinq>|{Nh$G{Bn9u7!1w(h&CZ{pJ5XUvnc7?*D=`% zF{Zu(h<2j_lJd_rO0VoD?#@s#8W6Hfk>D zT$UKLI8=2g$S7*xUycj3qzjzmZR!IqE4%esr@0S1&6*8SR(%Z@?_V4*8+#khFR*E! zL%&wn)kDkH9Tp?HcPtOj*LTpjqBqE4GU?F`u6Rmy>R|J+L@^$wB)CHC(Y5%Z_p}v- zK#ZQIXN#?^>}@+A-ascC8`pQrrk@&>?O_~_pDxT%i$S|_py$x*tcSsiZ2LOXHoiV4 z%iwwTy*5+oMUK6$Z()sdX{Wq81}$v12N1ZEeNzpkT5MPDPNQWW!#0(qnZ7;6BJ;Gt?7e+GYqGRwRhfL16kdKQotq}=h9}0* zDEqA=?}#KF!0k5jSP-~P2MbF`OlGU9Qca<*KM+866em_#6NP-HRSczDbSF+wvroVA z=3C@=%M4R&{Y*~hnm$6XDbLJM~$}c9oa<5+syZdsWR4;e6A|bLXEWnv(%20 zihRT_L(G4JU|4owFWl%88Vqj+)j^Xrc~S6+*xA@h)GEC`U{T;>jkjgA)|08{O}rxZ zuKlUzU2o%BKWBJALO)z~!B%F44zmfV8bK7F49tt0?T==cnV1I(_8FAX;_zR;f5GO) zt^ZNFqNtZWj{H%ei-!b<$vUV)ecqSFNW(#w zE7vTPKpsAlr>Vm3;`8#-L2<&|?c3fb(hAcSwX|_A*EYChD_3Q>viPs#Te@7w*yP1e zcpeUPw2cIpTaNLrax*^J6q+rFt|`*Q`i5QxfEZ?wW+=?z;UPIwmcAYHtm0cpzU&8? zaJjC}lpF!81v1DTurqD*5hzFD`wQX*_baUit;{Dv5H4Q2g}9y0+c=(FubdH4>D?V; zHN+Mm`M*cGzY@ROp}LbU-d#1qyIJsC4(w=^24yfJ>f6!SuvRTgynRkklu%av{1H>O zsAvWEmcv1^x|qeV@1+}2Knx>(%NI&ZlLF)Rehg75d#Rcn>) ziVvP1$fnV7B~1V(0^xs3U*oUry{Ns@AD z+c$e?K1@c*mz9iSS&w!tcaSp61le@KNT(vVhYI~JktT!N#t%gn4cO-!dkz)J zoMjF64ti39XpI=}oc&v$b#vtNZ+W^xuULflg7ODm7Fb^pTw>&`z*C3s8yfq@(1||{ z6m46F#*83DO=mbrppltNN=4GEPdo7Ouq7nK8KGJT20Px*vlQ+JG?qFV1w)~s& zmknx?+9K}wPGI?Ngh+m+Xh=zDsmp2V{eKQPw%opx6I0T|uR972IHQqlpE1^q{1}l` zGon1=eXf{1XuhoMb^bwY00mY5YFx9ZHQtaT=aG~khe@S4ieg+ku6)$-+hYp{BmOGm z2Csna+b!%xx2G;~Q)?o;Y{lR&Lp8VcLWG z2%$SCmvK8bLV0#~09Az_O7+iv_%Brq{Ok5dTl{Cn4`2L~!Sj9kU&i@2_V~}NAO83! z%kfXFKilNL(ZBb}KhWPl{P&~r`}plLe?k9`UHn>FVr0=R906_hIrhl(e yDk1=Y8Ng#EU Date: Wed, 27 May 2026 01:13:58 -0400 Subject: [PATCH 4/4] Create HOST --- HOST | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 HOST diff --git a/HOST b/HOST new file mode 100644 index 000000000000..c0ee25b7cf7e --- /dev/null +++ b/HOST @@ -0,0 +1,15 @@ +you use multiple repositories on one server, you will need to generate a dedicated key pair for each one. You can't reuse a deploy key for multiple repositories. +In the server's SSH configuration file (usually ~/.ssh/config), add an alias entry for each repository. For example: +Host github.com-repo-0 + Hostname github.com + IdentityFile=/home/user/.ssh/repo-0_deploy_key + +Host github.com-repo-1 + Hostname github.com + IdentityFile=/home/user/.ssh/repo-1_deploy_key + +Host github.com-repo-0 - The repository's alias. +Hostname github.com - Configures the hostname to use with the alias. +IdentityFile=/home/user/.ssh/repo-0_deploy_key - Assigns a private key to the alias. +You can then use the hostname's alias to interact with the repository using SSH, which will use the unique deploy key assigned to that alias. For example: +git clone git@github.com-repo-1:OWNER/repo-1.git