Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Automox 2.0.0 release #2088

Merged
merged 3 commits into from
Nov 1, 2023
Merged

Automox 2.0.0 release #2088

merged 3 commits into from
Nov 1, 2023

Conversation

cmcnally-r7
Copy link
Collaborator

@cmcnally-r7 cmcnally-r7 commented Oct 30, 2023

Proposed Changes

Description

Describe the proposed changes:

  • These updates provide support for the new Vulnerability Sync APIs. Changes were made to these APIs recently that are not compatible with the existing plugin actions.
  • Makes the return values explicit for the update_device, delete_device run_device_command, update_group, and delete_group actions as they returned bool values, but were passing a dictionary return value.
  • Fixes a bug in the update_device action where the default parameter value for server_group_id would cause the API call to fail because the value would get set to 0 when not provided, instead of the current value for the device.

PR Requirements

Developers, verify you have completed the following items by checking them off:

Testing

Unit Tests

Review our documentation on generating and writing plugin unit tests

  • Unit tests written for any new or updated code

In-Product Tests

If you are an InsightConnect customer or have access to an InsightConnect instance, the following in-product tests should be done:

  • Screenshot of job output with the plugin changes
  • Screenshot of the changed connection, actions, or triggers input within the InsightConnect workflow builder

Style

Review the style guide

  • For dependencies, pin OS package and Python package versions
  • For security, set least privileged account with USER nobody in the Dockerfile when possible
  • For size, use the slim SDK images when possible: rapid7/insightconnect-python-3-38-slim-plugin:{sdk-version-num} and rapid7/insightconnect-python-3-38-plugin:{sdk-version-num}
  • For error handling, use of PluginException and ConnectionTestException
  • For logging, use self.logger
  • For docs, use changelog style
  • For docs, validate markdown with insight-plugin validate which calls icon_validate to lint help.md

Functional Checklist

  • Work fully completed
  • Functional
    • Any new actions/triggers include JSON test files in the tests/ directory created with insight-plugin samples
    • Tests should all pass unless it's a negative test. Negative tests have a naming convention of tests/$action_bad.json
    • Unsuccessful tests should fail by raising an exception causing the plugin to die and an object should be returned on successful test
    • Add functioning test results to PR, sanitize any output if necessary
      • Single action/trigger insight-plugin run -T tests/example.json --debug --jq
      • All actions/triggers shortcut insight-plugin run -T all --debug --jq (use PR format at end)
    • Add functioning run results to PR, sanitize any output if necessary
      • Single action/trigger insight-plugin run -R tests/example.json --debug --jq
      • All actions/triggers shortcut insight-plugin run --debug --jq (use PR format at end)

Assessment

You must validate your work to reviewers:

  1. Run insight-plugin validate and make sure everything passes
  2. Run the assessment tool: insight-plugin run -A. For single action validation: insight-plugin run tests/{file}.json -A
  3. Copy (insight-plugin ... | pbcopy) and paste the output in a new post on this PR
  4. Add required screenshots from the In-Product Tests section

igorski-r7
igorski-r7 previously approved these changes Oct 31, 2023
rbowden-r7
rbowden-r7 previously approved these changes Oct 31, 2023
@cmcnally-r7 cmcnally-r7 dismissed stale reviews from rbowden-r7 and igorski-r7 via 4fb87db November 1, 2023 11:08
ax-tschmidtke and others added 3 commits November 1, 2023 11:09
* Fixes to the Vulnerability Sync Actions

* remove debugging print

* fix bug in update_device action

* help.md generation seems broken, fix manually

* feedback

* review feedback
* Update unit test imports

* Remove redundant unit test

* Update helpmd actions header and links

* Move triggers section below actions

* Help.md save point

* Helpmd refresh

* Insight tooling refresh minus schemas

* Help md violations corrected

* Update checksum and helpmd

* Please be the last of the errors

* Violations fixed

* Update output name

* Title validator fixed

* Update checksum

* Update titles
@cmcnally-r7 cmcnally-r7 force-pushed the automox-2.0.0-release branch from 4fb87db to 85a83eb Compare November 1, 2023 11:09
@jerichardson-r7 jerichardson-r7 merged commit b5eb66e into master Nov 1, 2023
6 checks passed
@cmcnally-r7 cmcnally-r7 deleted the automox-2.0.0-release branch November 1, 2023 11:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants