Skip to content
Open
Show file tree
Hide file tree
Changes from 18 commits
Commits
Show all changes
50 commits
Select commit Hold shift + click to select a range
78d8366
Create response_plan directory
xqi-splunk Nov 4, 2025
2e9fe65
Update directory name
xqi-splunk Nov 4, 2025
966743c
Copy response_templates artifacts to dist/api
xqi-splunk Nov 19, 2025
a08707e
Add response-templates schema validation workflow
xqi-splunk Nov 19, 2025
59628d8
Add feature branch for testing purpose
xqi-splunk Nov 19, 2025
2714f82
Update endpoint to playground
xqi-splunk Nov 19, 2025
b79b51d
Revert back debug changes
xqi-splunk Nov 24, 2025
9501dff
Move scripts to workflows
xqi-splunk Nov 25, 2025
8473296
Remove manual check in
xqi-splunk Nov 25, 2025
a9c4030
Add sorting for version and template name
xqi-splunk Nov 25, 2025
09aae74
Raise exception when file name not match
xqi-splunk Nov 25, 2025
dc9cbfc
Add indentation for json output
xqi-splunk Nov 25, 2025
49f1700
Add debug option to dump json schema
xqi-splunk Nov 25, 2025
ded2ba5
Generate merged templates at runtime
xqi-splunk Nov 25, 2025
79f635f
Rename openAPI spec yaml to yml
xqi-splunk Nov 25, 2025
13b27d3
Move validation to build.yml
xqi-splunk Nov 25, 2025
a8e754a
Use stem to get file name
xqi-splunk Nov 25, 2025
16523ab
Fix python package install
xqi-splunk Nov 25, 2025
0db44fc
Update version sorting using int
xqi-splunk Nov 25, 2025
9cc8381
Update openAPI spec for version
xqi-splunk Nov 26, 2025
77f60a0
Move build response templates to separate workflow
xqi-splunk Dec 2, 2025
c42b590
Fix naming in build-response-templates.yml
xqi-splunk Dec 2, 2025
9e1f2d3
Merge branch 'develop' into feature/PEX-699-response-plan
pyth0n1c Dec 2, 2025
5f1044d
Update response templates to the ones for first release
xqi-splunk Dec 9, 2025
594539e
Fix naming of response templates
xqi-splunk Dec 9, 2025
91e1edf
Response templates to be added by response plan team
xqi-splunk Dec 9, 2025
541b8a0
Keep response_templates directory
xqi-splunk Dec 9, 2025
ac368d0
Skip .gitkeep checking when check non-json files
xqi-splunk Dec 10, 2025
6956c15
Remove the .gitkeep
xqi-splunk Dec 10, 2025
6014b48
Initial version of Response Templates
ccl0utier Dec 11, 2025
26fa66d
Initial version of Response Templates
ccl0utier Dec 11, 2025
3a174dd
Initial version of Response Templates
ccl0utier Dec 11, 2025
14bba48
Revert "Initial version of Response Templates"
ccl0utier Dec 11, 2025
de22061
Revert "Initial version of Response Templates"
ccl0utier Dec 11, 2025
cc74c88
Revert "Initial version of Response Templates"
ccl0utier Dec 11, 2025
039929b
Initial version of Response Templates
ccl0utier Dec 11, 2025
96f2f5b
Initial version of Response Templates
ccl0utier Dec 11, 2025
53b73c5
Merge branch 'develop' into feature/PEX-699-response-plan
pyth0n1c Dec 12, 2025
cb4886c
Merge branch 'feature/PEX-699-response-plan' into cc/response-plans
pyth0n1c Dec 12, 2025
b391143
Update and rename AccountCompromise_v14.json to AccountCompromise_v2.…
kbouchardherjavecgroup Dec 15, 2025
be8e912
Update and rename DataBreach_v15.json to DataBreach_v2.json
kbouchardherjavecgroup Dec 15, 2025
a7a243d
Update and rename GenericIncidentResponse_v13.json to GenericIncident…
kbouchardherjavecgroup Dec 15, 2025
26f1a2b
Update and rename NIST80061_v14.json to NIST80061_v2.json
kbouchardherjavecgroup Dec 15, 2025
7366e06
Update and rename NetworkIndicatorEnrichment_v6.json to NetworkIndica…
kbouchardherjavecgroup Dec 15, 2025
08664b7
Update and rename SelfReplicatingMalware_v14.json to SelfReplicatingM…
kbouchardherjavecgroup Dec 15, 2025
cacdc0a
Update and rename SuspiciousEmail_v35.json to SuspiciousEmail_v2.json
kbouchardherjavecgroup Dec 15, 2025
00c9f22
Update and rename VulnerabilityDisclosure_v10.json to VulnerabilityDi…
kbouchardherjavecgroup Dec 15, 2025
7482d39
Merge pull request #3835 from splunk/kbouchard_rtedit
kbouchardherjavecgroup Dec 15, 2025
f0973bc
Merge pull request #3831 from splunk/cc/response-plans
kbouchardherjavecgroup Dec 15, 2025
ab72835
Merge branch 'develop' into feature/PEX-699-response-plan
pyth0n1c Dec 15, 2025
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 9 additions & 1 deletion .github/workflows/build.yml
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,7 @@ jobs:
run: |
echo "- Contentctl version - $(cat requirements.txt)"
pip install -r requirements.txt
pip install pyyaml jsonschema
git clone --depth=1 --single-branch --branch=master https://github.com/redcanaryco/atomic-red-team.git external_repos/atomic-red-team
git clone --depth=1 --single-branch --branch=master https://github.com/mitre/cti external_repos/cti

Expand All @@ -29,10 +30,17 @@ jobs:
contentctl build --enrichments --enforce_deprecation_mapping_requirement
mkdir artifacts
mv dist/DA-ESS-ContentUpdate-latest.tar.gz artifacts/
echo "Generate merged response templates and manifest"
python .github/workflows/response_templates/template_script.py -d ./response_templates -o ./response_templates/merged_response_templates -m
echo "Run validation for response templates"
python .github/workflows/response_templates/validate_response_templates.py -s .github/workflows/response_templates/mcopenapi_public.yml -d response_templates -m response_templates/merged_response_templates/manifest.json --merged-dir response_templates/merged_response_templates
mkdir -p dist/api/response_templates
cp response_templates/merged_response_templates/* dist/api/response_templates/

- name: store_artifacts
uses: actions/upload-artifact@v5
with:
name: content-latest
path: |
artifacts/DA-ESS-ContentUpdate-latest.tar.gz
artifacts/DA-ESS-ContentUpdate-latest.tar.gz
dist/api
Loading
Loading