JJediny

{
  "description": "Jenkinsfile YAML",
  "definitions": {
    "libraries": {
      "description": "One or more shared library identifiers to load",
      "type": "array",
      "items": {
        "type": "string"
      },
      "minItems": 1

JJediny

There are two types of markup in Liquid: Output and Tag.

• Output markup (which may resolve to text) is surrounded by

{{ matched pairs of curly brackets (ie, braces) }}

• Tag markup (which cannot resolve to text) is surrounded by

JJediny

JJediny

serve: 
  fork: 
  port: 
  exampleQuery: 
  cors: 
    origin: 
    allowedHeaders: 
      - 
    exposedHeaders: 
      - 

JJediny

JJediny

// A Declarative Pipeline is defined within a 'pipeline' block.
pipeline {

  // agent defines where the pipeline will run.
  agent {
    // This also could have been 'agent any' - that has the same meaning.
    label ""
    // Other possible built-in agent types are 'agent none', for not running the
    // top-level on any agent (which results in you needing to specify agents on
    // each stage and do explicit checkouts of scm in those stages), 'docker',

JJediny

{
  "title": "Proposed - OpenControl Schema vX",
  "type": "object",
  "properties": {
    "name": {
      "title": "Name",
      "description": "Name of the Component",
      "type": "string",
      "propertyOrder": 1
    },

JJediny

STIG ID,Version,Rule Title,Title,Severity,Check Text,Fix Text,CCI,CCI,Status,Published,contributor,Definition,Type,NIST800-53rev4,Control,NIST800-53rev3,Control,NIST800-53rev1,Control
38437,RHEL-06-000526,Automated file system mounting tools must not be enabled unless needed.,SRG-OS-999999,low,"To verify the ""autofs"" service is disabled, run the following command:

chkconfig --list autofs

If properly configured, the output should be the following:

autofs 0:off 1:off 2:off 3:off 4:off 5:off 6:off

Verify the ""autofs"" service is not running:

JJediny

Database

• Use encryption for data identifying users and sensitive data like access tokens, email addresses or billing details if possible (this will restrict queries to exact match lookups).
• If your database supports low cost encryption at rest (like AWS Aurora), then enable that to secure data on disk. Make sure all backups are stored encrypted as well.
• Use minimal privilege for the database access user account. Don’t use the database root account and check for unused accounts and accounts with bad passwords.
• Store and distribute secrets using a key store designed for the purpose. Don’t hard code in your applications.
• Fully prevent SQL injection by only using SQL prepared statements. For example: if using NPM, don’t use npm-mysql, use npm-mysql2 which supports prepared statements.

Development

• Ensure that all components of your software are scanned for vulnerabilities for every version pushed to production. This means O/S, libraries and packages. This should be automa

JJediny

using System;
#region Archer WebAPI Objects
public static class Application
{
    /// <summary>
    /// Agency System Inventory
    /// </summary>
    public static readonly Guid Agency_System_Inventory = new Guid("fbfbbd59-e993-46e6-8f31-64fe1cd0d92e");
    public static class Fields
    {