OWASP dependency-check for codecommit repositories
Project description
@cloudcomponents/cdk-dependency-check
OWASP dependency-check for codecommit repositories
Install
TypeScript/JavaScript:
npm i @cloudcomponents/cdk-dependency-check
Python:
pip install cloudcomponents.cdk-dependency-check
How to use
# Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
from aws_cdk.core import Construct, Stack, StackProps
from aws_cdk.aws_codecommit import Repository
from aws_cdk.aws_events import Schedule
from aws_cdk.aws_events_targets import SnsTopic
from aws_cdk.aws_s3 import Bucket
from aws_cdk.aws_sns import Topic
from aws_cdk.aws_sns_subscriptions import EmailSubscription
from cloudcomponents.cdk_dependency_check import CodeCommitDependencyCheck
class DependencyCheckStack(Stack):
def __init__(self, scope, id, *, description=None, env=None, stackName=None, tags=None, synthesizer=None, terminationProtection=None, analyticsReporting=None):
super().__init__(scope, id, description=description, env=env, stackName=stackName, tags=tags, synthesizer=synthesizer, terminationProtection=terminationProtection, analyticsReporting=analyticsReporting)
repository = Repository.from_repository_name(self, "Repository", process.env.REPOSITORY_NAME)
reports_bucket = Bucket(self, "Bucket")
# The following example runs a task every day at 4am
check = CodeCommitDependencyCheck(self, "CodeCommitDependencyCheck",
repository=repository,
reports_bucket=reports_bucket,
pre_check_command="npm i",
schedule=Schedule.cron(
minute="0",
hour="4"
)
)
check_topic = Topic(self, "CheckTopic")
check_topic.add_subscription(
EmailSubscription(process.env.DEVSECOPS_TEAM_EMAIL))
check.on_check_started("started",
target=SnsTopic(check_topic)
)
check.on_check_succeeded("succeeded",
target=SnsTopic(check_topic)
)
check.on_check_failed("failed",
target=SnsTopic(check_topic)
)
Upload HTML Reports
# Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
reports_bucket = Bucket(self, "Bucket")
# The following example runs a task every day at 4am
check = CodeCommitDependencyCheck(self, "CodeCommitDependencyCheck",
repository=repository,
reports_bucket=reports_bucket,
pre_check_command="npm i",
schedule=Schedule.cron(
minute="0",
hour="4"
)
)
API Reference
See API.md.
Example
See more complete examples.
License
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Close
Hashes for cloudcomponents.cdk-dependency-check-1.30.0.tar.gz
Algorithm | Hash digest | |
---|---|---|
SHA256 | 9d34115d87fcddad25520219f32bfecadcd2e54d1f3fbd179a3f66981376d166 |
|
MD5 | fb124c0ba449722c7dd8d36e31b9a80a |
|
BLAKE2b-256 | 60ca7d33ab96b0c02ed1ad02949927ca1083860ea9e2e3ffbbc564cd2e5a178d |
Close
Hashes for cloudcomponents.cdk_dependency_check-1.30.0-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 9e9778020b0763084722635ec20f5867a300b0b6fd9d922c1afd460953e9ce51 |
|
MD5 | 67c00b0b560c53cc663e231e7ec580b6 |
|
BLAKE2b-256 | 5818f66d8f76320f3995ab6a8ba8c1f3b0dc3e1c291e31754f2520330f93ca88 |