-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #5 from polarityio/develop
v5 server compatibility update
- Loading branch information
Showing
20 changed files
with
802 additions
and
916 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,58 +1,11 @@ | ||
# This workflow will run on merge of a PR or push to master | ||
# It will run the integration developement checklist and if that passes | ||
# creates a new release with the Release and Tag name both being the | ||
# package.json version and will with a created tgz file and the SHA256 has in the release body | ||
|
||
|
||
name: Release Current Version | ||
|
||
on: | ||
push: | ||
branches: [ master ] | ||
branches: [ master, main ] | ||
|
||
jobs: | ||
release-current-version: | ||
runs-on: ubuntu-latest | ||
container: 'centos:7' | ||
|
||
steps: | ||
- uses: actions/checkout@v2 | ||
- uses: actions/setup-node@v1 | ||
- name: Get NPM Version | ||
id: package-version | ||
uses: martinbeentjes/npm-get-version-action@95bc31c6dd3145896c110e382f840bb1e750d09c | ||
- name: Create Build | ||
id: create_build | ||
run: | | ||
npm install && | ||
cd .. && | ||
tar --exclude="./${{ github.event.repository.name }}/.git" --exclude="./${{ github.event.repository.name }}/.gitignore" --exclude="./${{ github.event.repository.name }}/package-lock.json" --exclude="./${{ github.event.repository.name }}/.github" -czvf "${{ github.event.repository.name }}-${{ steps.package-version.outputs.current-version }}.tgz" "./${{ github.event.repository.name }}" && | ||
echo "::set-output name=build_hash::$(sha256sum '${{ github.event.repository.name }}-${{ steps.package-version.outputs.current-version }}.tgz' | grep -oE '^[^ ]*' )" && | ||
cd ${{ github.event.repository.name }} | ||
- name: Polarity Integration Development Checklist | ||
id: int-dev-checklist | ||
uses: polarityio/polarity-integration-development-checklist@v1.0.0 | ||
with: | ||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
- name: Create Versioned Release | ||
id: create_versioned_release | ||
uses: actions/create-release@v1 | ||
env: | ||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
with: | ||
tag_name: ${{ steps.package-version.outputs.current-version}} | ||
release_name: ${{ steps.package-version.outputs.current-version}} | ||
body: | | ||
SHA256: ${{ steps.create_build.outputs.build_hash }} | ||
draft: false | ||
prerelease: false | ||
- name: Upload Release Asset | ||
id: upload-release-asset | ||
uses: actions/upload-release-asset@v1 | ||
env: | ||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
with: | ||
upload_url: ${{ steps.create_versioned_release.outputs.upload_url }} | ||
asset_path: ../${{ github.event.repository.name }}-${{ steps.package-version.outputs.current-version}}.tgz | ||
asset_name: ${{ github.event.repository.name }}-${{ steps.package-version.outputs.current-version}}.tgz | ||
asset_content_type: application/gzip | ||
Run: | ||
uses: polarityio/polarity-github-actions/.github/workflows/release-server-versions-for-int-store.yml@master | ||
# with: | ||
# use-integration-development-checklist: false |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,28 +1,26 @@ | ||
# Polarity Palo Alto AutoFocus Integration | ||
|
||
Polarity's AutoFocus integration gives users information on hashes that have been detected in Palo Alto's AutoFocus. | ||
Polarity's AutoFocus integration retrieves the indicator summary contained in an AutoFocus Threat Intelligence Card. | ||
|
||
![AutoFocus](https://user-images.githubusercontent.com/22529325/41662872-0e4ba0dc-7470-11e8-9cfa-2cfd5dc81e62.png) | ||
|
||
Please see [AutoFocus](https://www.paloaltonetworks.com/products/secure-the-network/subscriptions/autofocus) for more information. | ||
Please see [AutoFocus](https://www.paloaltonetworks.com/cortex/autofocus) for more information. | ||
|
||
## AutoFocus Integration Options | ||
|
||
### AutoFocus API Key | ||
|
||
Your AutoFocus API Key. To obtain a AutoFocus API key, you need to login to your Palo Alto account and navigate to site licenses to view your AutoFocus account. There you can find the API Key needed for AutoFocus. | ||
|
||
### AutoFocus URL | ||
Base AutoFocus API URL. Defaults to https://autofocus.paloaltonetworks.com | ||
|
||
Your AutoFocus URL. The URL you use to access Palo Alto's AutoFocus. | ||
### AutoFocus API Key | ||
Your AutoFocus API Key. To obtain a AutoFocus API key, you need to login to your Palo Alto account and navigate to site licenses to view your AutoFocus account. There you can find the API Key needed for AutoFocus. | ||
|
||
### View Malware Indicators Only | ||
When checked, the integration will only return indicators classified by AutoFocus as "malware" to the Polarity overlay window. | ||
|
||
## Installation Instructions | ||
|
||
Installation instructions for integrations are provided on the [PolarityIO GitHub Page](https://polarityio.github.io/). | ||
|
||
## Polarity | ||
|
||
Polarity is a memory-augmentation platform that improves and accelerates analyst decision making. For more information about the Polarity platform please see: | ||
|
||
https://polarity.io/ |
This file was deleted.
Oops, something went wrong.
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,3 @@ | ||
polarity.export = PolarityComponent.extend({ | ||
details: Ember.computed.alias('block.data.details') | ||
}); |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,3 @@ | ||
polarity.export = PolarityComponent.extend({ | ||
details: Ember.computed.alias('block.data.details') | ||
}); |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,69 @@ | ||
{ | ||
"name": "Palo Alto AutoFocus", | ||
"acronym": "AUTO", | ||
"description": "AutoFocus provides instant access to the massive repository of Palo Alto Networks threat intelligence crowdsourced from the largest footprint of network, endpoint and cloud intel sources.", | ||
"entityTypes": [ | ||
"ipv4", | ||
"domain", | ||
"hash" | ||
], | ||
"styles": [ | ||
"./styles/style.less" | ||
], | ||
"defaultColor": "light-pink", | ||
"block": { | ||
"component": { | ||
"file": "./components/block.js" | ||
}, | ||
"template": { | ||
"file": "./templates/block.hbs" | ||
} | ||
}, | ||
"summary": { | ||
"component": { | ||
"file": "./components/summary.js" | ||
}, | ||
"template": { | ||
"file": "./templates/summary.hbs" | ||
} | ||
}, | ||
"request": { | ||
"cert": "", | ||
"key": "", | ||
"passphrase": "", | ||
"ca": "", | ||
"proxy": "" | ||
}, | ||
"logging": { | ||
"level": "info" | ||
}, | ||
"options": [ | ||
{ | ||
"key": "url", | ||
"name": "AutoFocus URL", | ||
"description": "The base URL for the AutoFocus API including the schema.", | ||
"type": "text", | ||
"default": "https://autofocus.paloaltonetworks.com", | ||
"userCanEdit": false, | ||
"adminOnly": true | ||
}, | ||
{ | ||
"key": "apiKey", | ||
"name": "Valid AutoFocus API Key", | ||
"description": "Valid AutoFocus API Key", | ||
"default": "", | ||
"type": "password", | ||
"userCanEdit": false, | ||
"adminOnly": true | ||
}, | ||
{ | ||
"key": "malwareOnly", | ||
"name": "View Malware Indicators Only", | ||
"description": "If checked, only indicators flagged as malware will be returned", | ||
"default": false, | ||
"type": "boolean", | ||
"userCanEdit": false, | ||
"adminOnly": true | ||
} | ||
] | ||
} |
Oops, something went wrong.