Re: Secure code analysis

2017-12-23 Thread Nadir Hajiyani
Sure, please keep exploring Veracode, I am also checking on what are their options for seamlessly scanning directly from github. I work with Fortify on a day to day basis and they have a command line client called FodUploader which potentially can be integrated with a CI system if needed and also

[GitHub] metron issue #881: METRON-1071: Create CONTRIBUTING.md

2017-12-23 Thread JonZeolla
Github user JonZeolla commented on the issue: https://github.com/apache/metron/pull/881 Yup, looks good ---

Re: Secure code analysis

2017-12-23 Thread zeo...@gmail.com
Sure, not a problem. (1) I went to an event where a presenter from Veracode was calling out some bugs in open source projects, and that Veracode wanted to be a part of the solution. As such, they offered to give free analysis to open source projects that reach out. At this point the account

[GitHub] metron issue #856: METRON-1339 Stellar Shell functionality to verify stored ...

2017-12-23 Thread ottobackwards
Github user ottobackwards commented on the issue: https://github.com/apache/metron/pull/856 Refactored based on feedback for some things, based on making what I was trying for more correct in others. ---

[GitHub] metron pull request #856: METRON-1339 Stellar Shell functionality to verify ...

2017-12-23 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request: https://github.com/apache/metron/pull/856#discussion_r158588712 --- Diff: metron-stellar/stellar-common/src/main/java/org/apache/metron/stellar/common/utils/validation/annotations/StellarExpressionMap.java --- @@

[GitHub] metron pull request #856: METRON-1339 Stellar Shell functionality to verify ...

2017-12-23 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request: https://github.com/apache/metron/pull/856#discussion_r158588686 --- Diff: metron-stellar/stellar-common/src/main/java/org/apache/metron/stellar/common/utils/validation/StellarZookeeperBasedValidator.java --- @@

[GitHub] metron pull request #856: METRON-1339 Stellar Shell functionality to verify ...

2017-12-23 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request: https://github.com/apache/metron/pull/856#discussion_r158588556 --- Diff: metron-stellar/stellar-common/src/main/java/org/apache/metron/stellar/common/utils/validation/StellarZookeeperBasedValidator.java --- @@

[GitHub] metron pull request #856: METRON-1339 Stellar Shell functionality to verify ...

2017-12-23 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request: https://github.com/apache/metron/pull/856#discussion_r158588519 --- Diff: metron-stellar/stellar-common/src/main/java/org/apache/metron/stellar/common/utils/validation/StellarConfiguredStatementContainer.java ---

[GitHub] metron pull request #856: METRON-1339 Stellar Shell functionality to verify ...

2017-12-23 Thread nickwallen
Github user nickwallen commented on a diff in the pull request: https://github.com/apache/metron/pull/856#discussion_r158588450 --- Diff: metron-platform/metron-common/src/main/java/org/apache/metron/common/configuration/ConfigurationProvider.java --- @@ -0,0 +1,144 @@ +/*

[GitHub] metron pull request #856: METRON-1339 Stellar Shell functionality to verify ...

2017-12-23 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request: https://github.com/apache/metron/pull/856#discussion_r158588419 --- Diff: metron-platform/metron-management/README.md --- @@ -276,6 +278,13 @@ The functions are split roughly into a few sections: *

[GitHub] metron pull request #856: METRON-1339 Stellar Shell functionality to verify ...

2017-12-23 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request: https://github.com/apache/metron/pull/856#discussion_r158588382 --- Diff: metron-platform/metron-common/src/main/java/org/apache/metron/common/configuration/ConfigurationProvider.java --- @@ -0,0 +1,144 @@ +/*

[GitHub] metron pull request #856: METRON-1339 Stellar Shell functionality to verify ...

2017-12-23 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request: https://github.com/apache/metron/pull/856#discussion_r158588377 --- Diff: metron-platform/metron-common/src/main/java/org/apache/metron/common/configuration/ConfigurationProvider.java --- @@ -0,0 +1,144 @@ +/*

[GitHub] metron pull request #856: METRON-1339 Stellar Shell functionality to verify ...

2017-12-23 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request: https://github.com/apache/metron/pull/856#discussion_r158588357 --- Diff: metron-platform/metron-common/src/main/java/org/apache/metron/common/configuration/ConfigurationProvider.java --- @@ -0,0 +1,144 @@ +/*

[GitHub] metron pull request #856: METRON-1339 Stellar Shell functionality to verify ...

2017-12-23 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request: https://github.com/apache/metron/pull/856#discussion_r158588342 --- Diff: metron-platform/metron-common/src/main/java/org/apache/metron/common/configuration/ConfigurationProvider.java --- @@ -0,0 +1,144 @@ +/*

[GitHub] metron pull request #856: METRON-1339 Stellar Shell functionality to verify ...

2017-12-23 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request: https://github.com/apache/metron/pull/856#discussion_r158588194 --- Diff: metron-platform/metron-common/src/main/java/org/apache/metron/common/configuration/ConfigurationProvider.java --- @@ -0,0 +1,144 @@ +/*

Re: Secure code analysis

2017-12-23 Thread Nick Allen
> Veracode has provided us with a 100% free portal to scan the Metron code with, but in order to integrate, the safest option is probably to use the ASF's jenkins server (1) Can you describe this more? How has this been provided? Is this for all Apache projects; just Metron? Was this based on

[GitHub] metron pull request #856: METRON-1339 Stellar Shell functionality to verify ...

2017-12-23 Thread nickwallen
Github user nickwallen commented on a diff in the pull request: https://github.com/apache/metron/pull/856#discussion_r158584054 --- Diff: metron-stellar/stellar-common/src/main/java/org/apache/metron/stellar/common/utils/validation/StellarConfiguredStatementContainer.java --- @@

[GitHub] metron pull request #856: METRON-1339 Stellar Shell functionality to verify ...

2017-12-23 Thread nickwallen
Github user nickwallen commented on a diff in the pull request: https://github.com/apache/metron/pull/856#discussion_r158583046 --- Diff: metron-platform/metron-common/src/main/java/org/apache/metron/common/configuration/ConfigurationProvider.java --- @@ -0,0 +1,144 @@ +/*

[GitHub] metron pull request #856: METRON-1339 Stellar Shell functionality to verify ...

2017-12-23 Thread nickwallen
Github user nickwallen commented on a diff in the pull request: https://github.com/apache/metron/pull/856#discussion_r158583012 --- Diff: metron-platform/metron-common/src/main/java/org/apache/metron/common/configuration/ConfigurationProvider.java --- @@ -0,0 +1,144 @@ +/*

[GitHub] metron pull request #856: METRON-1339 Stellar Shell functionality to verify ...

2017-12-23 Thread nickwallen
Github user nickwallen commented on a diff in the pull request: https://github.com/apache/metron/pull/856#discussion_r158582738 --- Diff: metron-stellar/stellar-common/src/main/java/org/apache/metron/stellar/common/utils/validation/annotations/StellarExpressionMap.java --- @@

[GitHub] metron pull request #856: METRON-1339 Stellar Shell functionality to verify ...

2017-12-23 Thread nickwallen
Github user nickwallen commented on a diff in the pull request: https://github.com/apache/metron/pull/856#discussion_r158583416 --- Diff: metron-stellar/stellar-common/src/main/java/org/apache/metron/stellar/common/utils/validation/StellarZookeeperBasedValidator.java --- @@ -0,0

[GitHub] metron pull request #856: METRON-1339 Stellar Shell functionality to verify ...

2017-12-23 Thread nickwallen
Github user nickwallen commented on a diff in the pull request: https://github.com/apache/metron/pull/856#discussion_r158583014 --- Diff: metron-platform/metron-common/src/main/java/org/apache/metron/common/configuration/ConfigurationProvider.java --- @@ -0,0 +1,144 @@ +/*

[GitHub] metron pull request #856: METRON-1339 Stellar Shell functionality to verify ...

2017-12-23 Thread nickwallen
Github user nickwallen commented on a diff in the pull request: https://github.com/apache/metron/pull/856#discussion_r158583497 --- Diff: metron-platform/metron-common/src/main/java/org/apache/metron/common/configuration/ConfigurationProvider.java --- @@ -0,0 +1,144 @@ +/*

[GitHub] metron pull request #856: METRON-1339 Stellar Shell functionality to verify ...

2017-12-23 Thread nickwallen
Github user nickwallen commented on a diff in the pull request: https://github.com/apache/metron/pull/856#discussion_r158584492 --- Diff: metron-stellar/stellar-common/src/main/java/org/apache/metron/stellar/common/utils/validation/StellarZookeeperBasedValidator.java --- @@ -0,0

[GitHub] metron issue #883: METRON-1381: Add Apache license to MD files and remove th...

2017-12-23 Thread ottobackwards
Github user ottobackwards commented on the issue: https://github.com/apache/metron/pull/883 +1 ---

[GitHub] metron pull request #883: METRON-1381: Add Apache license to MD files and re...

2017-12-23 Thread justinleet
GitHub user justinleet opened a pull request: https://github.com/apache/metron/pull/883 METRON-1381: Add Apache license to MD files and remove the Rat exclusion Added an HTML comment license header to all the MD files. Removed the RAT exclusion for MD files, so we make sure to do

[GitHub] metron issue #881: METRON-1071: Create CONTRIBUTING.md

2017-12-23 Thread justinleet
Github user justinleet commented on the issue: https://github.com/apache/metron/pull/881 @ottobackwards I think you're right, we should have the header in the MD files. I looked back at the discussion you kicked off, the general agreement was that we should, but we didn't follow up.