gatechecks.yaml

   1 # When adding projects all `arrays: []` sections must have
   2 # a value, Use 'nullvalue' if no waivers are available.
   3 #
   4 # This file uses standard regular expression syntax,  however be mindful
   5 # of escaping YAML delimiters too (such as `:`) using double quotes "".
   6
   7 binaries:
   8   binary_ignore: [\.pdf,\.png,\.jpeg,\.jpg,\.gif,\.idx,\.pack,\.woff,\.ttf,\.eot,\.DS_Store,\.git/objects,\.git/index,
   9                   \.otf,\.ico]
  10   releng:
  11     binary_ignore: [nullvalue]
  12   sandbox:
  13     binary_ignore: [nullvalue]
  14   testproj:
  15     binary_ignore: [nullvalue]
  16
  17 file_audits:
  18   file_names: [\.gpg$,\.key$,\.asc$,\.sig$,\.md5,aws_access_key_id,aws_secret_access_key,id_rsa]
  19   file_contents: [-----BEGIN\sRSA\sPRIVATE\sKEY----,secret,ssh_key,private_key,md5,wget,"curl(.*?)bash",eval,
  20                  "sh(.*?)curl","git(.*?)clone",gost,md2,md4,md5,rc4,sha0,streebog,dual_ec_drbg,
  21                  snefru,panama,ripemd,sslv1,sslv2,tlsv1]
  22   releng:
  23     file_names: [nullvalue]
  24     file_contents: [slave_secret,self\.local_ssh_key,self\.proxy_ssh_key,jh_ssh_key='/root/\.ssh/id_rsa',fa-user-secret,
  25                      -s  set secret key,paramiko\.RSAKey\.from_private_key_file\(pkey_file\),git clone the Openstack-Ansible,
  26                      secret not defined,user_secrets\.yml,wget -O /tmp/get-pip\.py,"PKG_MAP\\[wget\\]",^wget \\,
  27                      "git clone(.*)gerrit\\.opnfv\\.org","git clone(.*)\\.openstack\\.org",wget(.*)build.opnfv.org,
  28                      wget --version,"\\[wget\\]=wget",git repositories of XCI,"packages = \\['parted', 'puppet', 'wget'",
  29                      bifrost_ssh_private_key,github\.com/maestrodev/puppet-wget,"wget http://repo1\\.maven\\.org",
  30                      elif type wget >/dev/null,wget \$get_pip_url,"wget(.*)puppetlabs\\.com",git_clone(.*)MOD(.*)MODULE_PATH(.*)MODULE_NAME,
  31                      git clone \$MOD \$DEST,function git_clone,"name: SSH_KEY","name: GIT_CLONE_BASE",
  32                      wget -q -O \$ODL_ZIP \$NETVIRT_ARTIFACT_URL,git clone(.*)\$GIT_BASE(.*)\$WORKSPACE,
  33                      git clone --quiet --branch \$BRANCH \$LAB_CONFIG_URL lab-config,git clone(.*)\$OPENSTACK_OSA_GIT_URL,
  34                      wget --directory-prefix=(.*)SNAP_CACHE(.*)snap_url(.*),sudo yum -y install wget,cacheValues,isInfiniteValue,
  35                      wget(.*)WORKSPACE/opnfv\.properties(.*)GS_URL(.*)properties,wget > /dev/null,fileValidationError,eval_collection,
  36                      eval_db,if \(name === 'evals'\),evaluate,value,ast\.literal_eva,_eval_pods_db,new = eval\(obj\)]
  37   sandbox:
  38     file_names: [nullvalue]
  39     file_contents: [nullvalue]
  40   testproj:
  41     file_names: [nullvalue]
  42     file_contents: [nullvalue]
  43
  44 licence:
  45   licence_ext: ['.rst','.md','.py','.sh','.java','.rb']
  46   licence_ignore: ['__init__.py']
  47