From 1c3eefc3feb061fd670bc1a6b19815964ac2e159 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 2 Nov 2020 06:31:41 +0000 Subject: [PATCH 1/7] Bump aiosqlite from 0.15.0 to 0.16.0 in /requirements Bumps [aiosqlite](https://github.com/omnilib/aiosqlite) from 0.15.0 to 0.16.0. - [Release notes](https://github.com/omnilib/aiosqlite/releases) - [Changelog](https://github.com/omnilib/aiosqlite/blob/main/CHANGELOG.md) - [Commits](https://github.com/omnilib/aiosqlite/compare/v0.15.0...v0.16.0) Signed-off-by: dependabot[bot] --- requirements/base.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements/base.txt b/requirements/base.txt index e2a592af..7dae711d 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -1,7 +1,7 @@ aiodns==2.0.0 aiohttp==3.7.2 aiomultiprocess==0.8.0 -aiosqlite==0.15.0 +aiosqlite==0.16.0 beautifulsoup4==4.9.3 certifi==2020.6.20 dnspython==2.0.0 From d0a00c61791e93506a4bc3edd212645b765a908a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 2 Nov 2020 06:35:11 +0000 Subject: [PATCH 2/7] Bump aiosqlite from 0.15.0 to 0.16.0 Bumps [aiosqlite](https://github.com/omnilib/aiosqlite) from 0.15.0 to 0.16.0. - [Release notes](https://github.com/omnilib/aiosqlite/releases) - [Changelog](https://github.com/omnilib/aiosqlite/blob/main/CHANGELOG.md) - [Commits](https://github.com/omnilib/aiosqlite/compare/v0.15.0...v0.16.0) Signed-off-by: dependabot[bot] --- Pipfile | 2 +- Pipfile.lock | 14 +++++++------- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/Pipfile b/Pipfile index c214bb7e..a56c6758 100644 --- a/Pipfile +++ b/Pipfile @@ -7,7 +7,7 @@ name = "pypi" aiodns = "==2.0.0" aiohttp = "==3.7.2" aiomultiprocess = "==0.8.0" -aiosqlite = "==0.15.0" +aiosqlite = "==0.16.0" beautifulsoup4 = "==4.9.3" dnspython = "==2.0.0" netaddr = "==0.8.0" diff --git a/Pipfile.lock b/Pipfile.lock index 5b24c122..7a8d0375 100644 --- a/Pipfile.lock +++ b/Pipfile.lock @@ -1,7 +1,7 @@ { "_meta": { "hash": { - "sha256": "96935affedf67cd239feca78abc158937a5c89c2d06ef43dc4baa3632a04ba01" + "sha256": "a8d4b2c32d8f5ec0dd99c0de1ad3c75b0129e2ab503c386b28740e6ea502e438" }, "pipfile-spec": 6, "requires": {}, @@ -70,11 +70,11 @@ }, "aiosqlite": { "hashes": [ - "sha256:19b984b6702aed9f1c85c023f37296954547fc4030dae8e9d027b2a930bed78b", - "sha256:a2884793f4dc8f2798d90e1dfecb2b56a6d479cf039f7ec52356a7fd5f3bdc57" + "sha256:0e5b8465b0b6aa7f2b0a1fa7f3af53216fcea1947f524b658bd4b4696e72f1b7", + "sha256:d014ef07fbc523b2d195fc17cf35982285e3220eb73c1068d5df37b569950ea8" ], "index": "pypi", - "version": "==0.15.0" + "version": "==0.16.0" }, "appdirs": { "hashes": [ @@ -648,10 +648,10 @@ }, "toml": { "hashes": [ - "sha256:926b612be1e5ce0634a2ca03470f95169cf16f939018233a670519cb4ac58b0f", - "sha256:bda89d5935c2eac546d648028b9901107a595863cb36bae0c73ac804a9b4ce88" + "sha256:806143ae5bfb6a3c6e736a764057db0e6a0e05e338b5630894a5f779cabb4f9b", + "sha256:b3bda1d108d5dd99f4a20d24d9c348e91c4db7ab1b749200bded2f839ccbe68f" ], - "version": "==0.10.1" + "version": "==0.10.2" }, "typed-ast": { "hashes": [ From a8e2b6243c2edf14235d7ca7e18bbe2307d1b583 Mon Sep 17 00:00:00 2001 From: ShiftLeft Date: Mon, 2 Nov 2020 21:52:10 +0100 Subject: [PATCH 3/7] adding ShiftLeft action workflow config --- .github/workflows/shiftleft.yml | 48 +++++++++++++++++++++++++++++++++ 1 file changed, 48 insertions(+) create mode 100644 .github/workflows/shiftleft.yml diff --git a/.github/workflows/shiftleft.yml b/.github/workflows/shiftleft.yml new file mode 100644 index 00000000..d9f9f7d7 --- /dev/null +++ b/.github/workflows/shiftleft.yml @@ -0,0 +1,48 @@ +--- +# This workflow integrates ShiftLeft NG SAST with GitHub +# Visit https://docs.shiftleft.io for help +name: ShiftLeft + +on: + pull_request: + workflow_dispatch: + +jobs: + NextGen-Static-Analysis: + runs-on: ubuntu-20.04 + steps: + - uses: actions/checkout@v2 + - name: Download ShiftLeft CLI + run: | + curl https://cdn.shiftleft.io/download/sl > ${GITHUB_WORKSPACE}/sl && chmod a+rx ${GITHUB_WORKSPACE}/sl + - name: Extract branch name + shell: bash + run: echo "##[set-output name=branch;]$(echo ${GITHUB_REF#refs/heads/})" + id: extract_branch + - name: NextGen Static Analysis + run: ${GITHUB_WORKSPACE}/sl analyze --wait --app theHarvester --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --python $(pwd) + env: + SHIFTLEFT_ACCESS_TOKEN: ${{ secrets.SHIFTLEFT_ACCESS_TOKEN }} + + + ## Uncomment the following section to enable build rule checking and enforcing. + #Build-Rules: + #runs-on: ubuntu-latest + #needs: NextGen-Static-Analysis + #steps: + #- uses: actions/checkout@v2 + #- name: Download ShiftLeft CLI + # run: | + # curl https://cdn.shiftleft.io/download/sl > ${GITHUB_WORKSPACE}/sl && chmod a+rx ${GITHUB_WORKSPACE}/sl + #- name: Validate Build Rules + # run: ${GITHUB_WORKSPACE}/sl check-analysis --app theHarvester \ + # --source 'tag.branch=${{ github.event.pull_request.base.ref }}' \ + # --target "tag.branch=${{ github.head_ref || steps.extract_branch.outputs.branch }}" \ + # --report \ + # --github-pr-number=${{github.event.number}} \ + # --github-pr-user=${{ github.repository_owner }} \ + # --github-pr-repo=${{ github.event.repository.name }} \ + # --github-token=${{ secrets.GITHUB_TOKEN }} + # env: + #SHIFTLEFT_ACCESS_TOKEN: ${{ secrets.SHIFTLEFT_ACCESS_TOKEN }} + \ No newline at end of file From 23b76f2bdffad6123bc6158f319abc0a398416a0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 9 Nov 2020 06:43:06 +0000 Subject: [PATCH 4/7] Bump certifi from 2020.6.20 to 2020.11.8 in /requirements Bumps [certifi](https://github.com/certifi/python-certifi) from 2020.6.20 to 2020.11.8. - [Release notes](https://github.com/certifi/python-certifi/releases) - [Commits](https://github.com/certifi/python-certifi/compare/2020.06.20...2020.11.08) Signed-off-by: dependabot[bot] --- requirements/base.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements/base.txt b/requirements/base.txt index 7dae711d..a39644ae 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -3,7 +3,7 @@ aiohttp==3.7.2 aiomultiprocess==0.8.0 aiosqlite==0.16.0 beautifulsoup4==4.9.3 -certifi==2020.6.20 +certifi==2020.11.8 dnspython==2.0.0 netaddr==0.8.0 plotly==4.12.0 From 6a8fe192175fb6ff2df081ddde0192c7292bed9b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 12 Nov 2020 06:02:45 +0000 Subject: [PATCH 5/7] Bump requests from 2.24.0 to 2.25.0 in /requirements Bumps [requests](https://github.com/psf/requests) from 2.24.0 to 2.25.0. - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/master/HISTORY.md) - [Commits](https://github.com/psf/requests/compare/v2.24.0...v2.25.0) Signed-off-by: dependabot[bot] --- requirements/base.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements/base.txt b/requirements/base.txt index 7dae711d..e93d7c72 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -9,7 +9,7 @@ netaddr==0.8.0 plotly==4.12.0 pyppeteer==0.2.2 PyYAML==5.3.1 -requests==2.24.0 +requests==2.25.0 retrying==1.3.3 shodan==1.24.0 texttable==1.6.3 From 0a1401161650b106a1edfa7d6a0423f4ce3bc428 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 12 Nov 2020 06:08:27 +0000 Subject: [PATCH 6/7] Bump requests from 2.24.0 to 2.25.0 Bumps [requests](https://github.com/psf/requests) from 2.24.0 to 2.25.0. - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/master/HISTORY.md) - [Commits](https://github.com/psf/requests/compare/v2.24.0...v2.25.0) Signed-off-by: dependabot[bot] --- Pipfile | 2 +- Pipfile.lock | 27 ++++++++++++++------------- 2 files changed, 15 insertions(+), 14 deletions(-) diff --git a/Pipfile b/Pipfile index a56c6758..a9fa2a73 100644 --- a/Pipfile +++ b/Pipfile @@ -14,7 +14,7 @@ netaddr = "==0.8.0" plotly = "==4.12.0" pyppeteer = "==0.2.2" PyYAML = "==5.3.1" -requests = "==2.24.0" +requests = "==2.25.0" retrying = "==1.3.3" shodan = "==1.24.0" texttable = "==1.6.3" diff --git a/Pipfile.lock b/Pipfile.lock index 7a8d0375..1538f649 100644 --- a/Pipfile.lock +++ b/Pipfile.lock @@ -1,7 +1,7 @@ { "_meta": { "hash": { - "sha256": "a8d4b2c32d8f5ec0dd99c0de1ad3c75b0129e2ab503c386b28740e6ea502e438" + "sha256": "13a6e6eb3f65628577f7b7ec10694eaaa2e54081967c51559135220a5883d686" }, "pipfile-spec": 6, "requires": {}, @@ -92,10 +92,10 @@ }, "attrs": { "hashes": [ - "sha256:26b54ddbbb9ee1d34d5d3668dd37d6cf74990ab23c828c2888dccdceee395594", - "sha256:fce7fc47dfc976152e82d53ff92fa0407700c21acd20886a13777a0d20e655dc" + "sha256:31b2eced602aa8423c2aea9c76a724617ed67cf9513173fd3a4f03e3a929c7e6", + "sha256:832aa3cde19744e49938b91fea06d69ecb9e649c93ba974535d08ad92164f700" ], - "version": "==20.2.0" + "version": "==20.3.0" }, "beautifulsoup4": { "hashes": [ @@ -200,6 +200,7 @@ }, "lxml": { "hashes": [ + "sha256:098fb713b31050463751dcc694878e1d39f316b86366fb9fe3fbbe5396ac9fab", "sha256:0e89f5d422988c65e6936e4ec0fe54d6f73f3128c80eb7ecc3b87f595523607b", "sha256:189ad47203e846a7a4951c17694d845b6ade7917c47c64b29b86526eefc3adf5", "sha256:1d87936cb5801c557f3e981c9c193861264c01209cb3ad0964a16310ca1b3301", @@ -369,11 +370,11 @@ }, "requests": { "hashes": [ - "sha256:b3559a131db72c33ee969480840fff4bb6dd111de7dd27c8ee1f820f4f00231b", - "sha256:fe75cc94a9443b9246fc7049224f75604b113c36acb93f87b80ed42c44cbb898" + "sha256:7f1a0b932f4a60a1a65caa4263921bb7d9ee911957e0ae4a23a6dd08185ad5f8", + "sha256:e786fa28d8c9154e6a4de5d46a1d921b8749f8b74e28bde23768e5e16eece998" ], "index": "pypi", - "version": "==2.24.0" + "version": "==2.25.0" }, "retrying": { "hashes": [ @@ -429,10 +430,10 @@ }, "urllib3": { "hashes": [ - "sha256:8d7eaa5a82a1cac232164990f04874c594c9453ec55eef02eab885aa02fc17a2", - "sha256:f5321fbe4bf3fefa0efd0bfe7fb14e90909eb62a48ccda331726b4319897dd5e" + "sha256:097116a6f16f13482d2a2e56792088b9b2920f4eb6b4f84a2c90555fb673db74", + "sha256:61ad24434555a42c0439770462df38b47d05d9e8e353d93ec3742900975e3e65" ], - "version": "==1.25.11" + "version": "==1.26.1" }, "uvloop": { "hashes": [ @@ -525,10 +526,10 @@ "develop": { "attrs": { "hashes": [ - "sha256:26b54ddbbb9ee1d34d5d3668dd37d6cf74990ab23c828c2888dccdceee395594", - "sha256:fce7fc47dfc976152e82d53ff92fa0407700c21acd20886a13777a0d20e655dc" + "sha256:31b2eced602aa8423c2aea9c76a724617ed67cf9513173fd3a4f03e3a929c7e6", + "sha256:832aa3cde19744e49938b91fea06d69ecb9e649c93ba974535d08ad92164f700" ], - "version": "==20.2.0" + "version": "==20.3.0" }, "flake8": { "hashes": [ From 18611dcb7909366239f347e9e8bb53a69cb93849 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 14 Nov 2020 02:23:47 +0000 Subject: [PATCH 7/7] Bump certifi from 2020.6.20 to 2020.11.8 Bumps [certifi](https://github.com/certifi/python-certifi) from 2020.6.20 to 2020.11.8. - [Release notes](https://github.com/certifi/python-certifi/releases) - [Commits](https://github.com/certifi/python-certifi/compare/2020.06.20...2020.11.08) Signed-off-by: dependabot[bot] --- Pipfile | 2 +- Pipfile.lock | 14 +++++++------- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/Pipfile b/Pipfile index a9fa2a73..f71a876e 100644 --- a/Pipfile +++ b/Pipfile @@ -20,7 +20,7 @@ shodan = "==1.24.0" texttable = "==1.6.3" lxml = "==4.6.1" uvloop = "==0.14.0" -certifi = "==2020.6.20" +certifi = "==2020.11.8" [dev-packages] flake8 = "==3.8.4" diff --git a/Pipfile.lock b/Pipfile.lock index 1538f649..4f7f8c1c 100644 --- a/Pipfile.lock +++ b/Pipfile.lock @@ -1,7 +1,7 @@ { "_meta": { "hash": { - "sha256": "13a6e6eb3f65628577f7b7ec10694eaaa2e54081967c51559135220a5883d686" + "sha256": "bcf5370b0e3ef833e35ec1e7b06658e48ebf4348bf9f81832154b90df92c03b7" }, "pipfile-spec": 6, "requires": {}, @@ -108,11 +108,11 @@ }, "certifi": { "hashes": [ - "sha256:5930595817496dd21bb8dc35dad090f1c2cd0adfaf21204bf6732ca5d8ee34d3", - "sha256:8fc0819f1f30ba15bdb34cceffb9ef04d99f420f68eb75d901e9560b8749fc41" + "sha256:1f422849db327d534e3d0c5f02a263458c3955ec0aae4ff09b95f195c59f4edd", + "sha256:f05def092c44fbf25834a51509ef6e631dc19765ab8a57b4e7ab85531f0a9cf4" ], "index": "pypi", - "version": "==2020.6.20" + "version": "==2020.11.8" }, "cffi": { "hashes": [ @@ -430,10 +430,10 @@ }, "urllib3": { "hashes": [ - "sha256:097116a6f16f13482d2a2e56792088b9b2920f4eb6b4f84a2c90555fb673db74", - "sha256:61ad24434555a42c0439770462df38b47d05d9e8e353d93ec3742900975e3e65" + "sha256:19188f96923873c92ccb987120ec4acaa12f0461fa9ce5d3d0772bc965a39e08", + "sha256:d8ff90d979214d7b4f8ce956e80f4028fc6860e4431f731ea4a8c08f23f99473" ], - "version": "==1.26.1" + "version": "==1.26.2" }, "uvloop": { "hashes": [