ff-sec-actions/security/release-graph.json at main · filecoin-project/ff-sec-actions · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
{
  "schema_version": 1,
  "repository": "filecoin-project/ff-sec-actions",
  "entrypoints": [
    "examples/consumer-profile-detection.yml",
    ".github/workflows/consumer-alpha-canary.yml",
    ".github/workflows/security-pipeline.yml",
    ".github/workflows/evaluation-pipeline.yml",
    ".github/workflows/ecosystem-baseline.yml",
    ".github/workflows/ai-code-review.yml",
    ".github/workflows/sec-actions.yml",
    ".github/workflows/sec-codeql.yml",
    ".github/workflows/sec-dependencies.yml",
    ".github/workflows/sec-dependency-review.yml",
    ".github/workflows/sec-iac.yml",
    ".github/workflows/sec-licenses.yml",
    ".github/workflows/sec-sbom.yml",
    ".github/workflows/sec-scorecard.yml",
    ".github/workflows/sec-secrets.yml",
    ".github/workflows/sec-semgrep.yml",
    ".github/workflows/sec-slither.yml"
  ],
  "expected_assets": {
    "actions/detect-filecoin-profile": [
      "actions/detect-filecoin-profile/action.yml",
      "actions/detect-filecoin-profile/detect-filecoin-profile.sh",
      "profiles/filecoin-project-profiles.json"
    ],
    "actions/aggregate-results": [
      "actions/aggregate-results/action.yml",
      "actions/aggregate-results/aggregate-results.sh",
      "schemas/evaluation-result.schema.json",
      "schemas/evidence-bundle.schema.json",
      "scripts/check-evaluation-result.sh"
    ],
    "actions/evaluation-adapter": [
      "actions/evaluation-adapter/action.yml",
      "actions/evaluation-adapter/evaluation-adapter.sh",
      "schemas/evaluation-result.schema.json"
    ],
    "actions/ai-code-review": [
      "actions/ai-code-review/action.yml",
      "actions/ai-code-review/scripts/review.sh",
      "actions/ai-code-review/scripts/schema.json",
      "prompts/base-reviewer.md",
      "prompts/default.md",
      "prompts/filecoin.md"
    ],
    "actions/gitleaks-scan": [
      "actions/gitleaks-scan/action.yml",
      "actions/gitleaks-scan/gitleaks-scan.sh"
    ],
    "actions/scanner-outcome": [
      "actions/scanner-outcome/action.yml",
      "actions/scanner-outcome/scanner-outcome.sh",
      "schemas/evaluation-result.schema.json"
    ],
    "actions/semgrep-scan": [
      "actions/semgrep-scan/action.yml",
      "actions/semgrep-scan/semgrep-scan.sh",
      "rules/ecosystem-baseline.yml"
    ],
    "actions/zizmor-scan": [
      "actions/zizmor-scan/action.yml",
      "actions/zizmor-scan/zizmor-scan.sh"
    ]
  },
  "required_markers": {
    ".github/workflows/sec-dependencies.yml": ["version: v0.70.0"],
    ".github/workflows/sec-iac.yml": ["version: v0.70.0"],
    ".github/workflows/sec-licenses.yml": ["version: v0.70.0"],
    ".github/workflows/sec-sbom.yml": ["syft-version: v1.44.0"],
    ".github/workflows/sec-semgrep.yml": [
      "semgrep/semgrep:1.93.0@sha256:f35c7891e2030110a84a721fdd556ce8f3da6e7e69d7fab1d3660ae1bb334474"
    ],
    ".github/workflows/sec-slither.yml": [
      "version: v1.7.1",
      "slither-version: 0.11.5"
    ],
    "actions/gitleaks-scan/gitleaks-scan.sh": [
      "GITLEAKS_VERSION=\"8.30.1\"",
      "551f6fc83ea457d62a0d98237cbad105af8d557003051f41f3e7ca7b3f2470eb",
      "e4a487ee7ccd7d3a7f7ec08657610aa3606637dab924210b3aee62570fb4b080",
      "dfe101a4db2255fc85120ac7f3d25e4342c3c20cf749f2c20a18081af1952709",
      "b40ab0ae55c505963e365f271a8d3846efbc170aa17f2607f13df610a9aeb6a5"
    ],
    "actions/zizmor-scan/zizmor-scan.sh": [
      "ZIZMOR_VERSION=\"1.28.0\"",
      "e87b67160194884e375a46a12c57ccc904f762b53845f254fab7f17d98809c09",
      "324e43770cfacf4216f8aefb287263b5b5c733c85b03bf7583b5cc4a0460239e",
      "40a58d8560d65c71357b3977d0da425773bf8f10bf1ffd38099d963d3afdf3aa",
      "54949bbd6b4c8527046bb8990bac9e0dab3eec787640f4e6199ae121dd1040be"
    ]
  }
}