JJediny

JJediny

The twelve-factor app Checklist

Also factors in the four principles of modern Release Engineering

• Identifiability Being able to identify all of the source, tools, environment, and other components that make up a particular release.
• Reproducibility The ability to integrate source, third party components, data, and deployment externals of a software system in order to guarantee operational stability.
• Consistency The mission to provide a stable framework for development, deployment, audit, and accountability for software components.
• Agility The ongoing research into what are the repercussions of modern software engineering practices on the productivity in the software cycle, i.e. continuous integration.

Codebase

JJediny

'''
This is an example of how to send data to Slack webhooks in Python with the
requests module.
Detailed documentation of Slack Incoming Webhooks:
https://api.slack.com/incoming-webhooks

'''

import json
import requests

JJediny

{
  "id": "test",
  "modules": {
    "cloudtrail": {
      "enabled": true,
      "event_pattern": {
        "source": [
          "aws.ec2"
        ]
      }

JJediny

---
# This has been tested with ansible 1.3 with these commands:
#   ansible-playbook -i hosts ansible_conditionals_examples.yaml --extra-vars="hosts=myhosts isFirstRun=false"
#   ansible-playbook -i hosts ansible_conditionals_examples.yaml --extra-vars="hosts=myhosts isFirstRun=true"
#   ansible-playbook -i hosts ansible_conditionals_examples.yaml --extra-vars="hosts=myhosts"
# NB: The type of the variable is crucial!

- name: Ansible Conditionals Examples
  hosts: $hosts
  vars_files:

JJediny

{
  "title": "Proposed - OpenControl Schema vX",
  "type": "object",
  "properties": {
    "name": {
      "title": "Name",
      "description": "Name of the Component",
      "type": "string",
      "propertyOrder": 1
    },

JJediny

# Hello, and welcome to makefile basics.
#
# You will learn why `make` is so great, and why, despite its "weird" syntax,
# it is actually a highly expressive, efficient, and powerful way to build
# programs.
#
# Once you're done here, go to
# http://www.gnu.org/software/make/manual/make.html
# to learn SOOOO much more.

JJediny

JJediny

{
  "description": "Jenkinsfile YAML",
  "definitions": {
    "libraries": {
      "description": "One or more shared library identifiers to load",
      "type": "array",
      "items": {
        "type": "string"
      },
      "minItems": 1

JJediny

Database

• Use encryption for data identifying users and sensitive data like access tokens, email addresses or billing details if possible (this will restrict queries to exact match lookups).
• If your database supports low cost encryption at rest (like AWS Aurora), then enable that to secure data on disk. Make sure all backups are stored encrypted as well.
• Use minimal privilege for the database access user account. Don’t use the database root account and check for unused accounts and accounts with bad passwords.
• Store and distribute secrets using a key store designed for the purpose. Don’t hard code in your applications.
• Fully prevent SQL injection by only using SQL prepared statements. For example: if using NPM, don’t use npm-mysql, use npm-mysql2 which supports prepared statements.

Development

• Ensure that all components of your software are scanned for vulnerabilities for every version pushed to production. This means O/S, libraries and packages. This should be automa