sbs2001

{
  "__inputs": [
    {
      "name": "DS_PROMETHEUS",
      "label": "Prometheus",
      "description": "",
      "type": "datasource",
      "pluginId": "prometheus",
      "pluginName": "Prometheus"
    }

sbs2001

Proposal for enabling LAPI error handling in bouncers

Context

This proposal is for solving crowdsecurity/cs-firewall-bouncer#166 in a generalized manner.

Currently the clients of StreamBouncer have no way to handle the errors on LAPI calls .

We could solve this specific issue by tracking LAPI call errors via prometheus counter.

sbs2001

Crowdsec X Fastly Integration

This integration would allow Fastly users to detect and remediate malevolent IPs using CrowdSec. This will be achieved by :

1. Leveraging Fastly's ability to forward logs to a Syslog server of the user's choice.
2. CrowdSec would consume the logs from the syslog server. It will detect and report malevolent IPs to Fastly bouncer.
3. The fastly bouncer would make changes in the Fastly configuration to actualize suggestions made by CrowdSec.

Following proposal contains details about (3)

sbs2001

The objective of this module is to :

1. Allow users to provision crowdsec in AWS infra via terraform. Initially it'll target the serverless setup.
2. Abstract details and provide out of the box functional UX via simple terraform config.

The module interface would look like:

module "crowdsec"{

sbs2001

# Copyright (c) nexB Inc. and others. All rights reserved.
# http://nexb.com and https://github.com/nexB/vulnerablecode/
# The VulnerableCode software is licensed under the Apache License version 2.0.
# Data generated with VulnerableCode require an acknowledgment.
#
# You may not use this software except in compliance with the License.
# You may obtain a copy of the License at: http://apache.org/licenses/LICENSE-2.0
# Unless required by applicable law or agreed to in writing, software distributed
# under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
# CONDITIONS OF ANY KIND, either express or implied. See the License for the

sbs2001

Getting started

Thanks for showing interest in contributing to AboutCode org projects. To start making contributions to the project of your interest:

1. Visit the repository of the project you are interested in.
2. Try to understand how the project of your interest is used by end users. For example, in case of scancode-toolkit, this might be running license scans on your personal projects. You can find out how to set up the project as a user from the project's README itself.

sbs2001

scores = {"cvss1":1.2}

data = [
        {
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00042.html",
          "name": "openSUSE-SU-2019:1906",
          "refsource": "SUSE",
          "tags": [

          ]

sbs2001

Google Summer of Code 2020 Report

Organisation : AboutCode

Project Title : Enhancement of VulnerableCode

Quick primer on VulnerableCode VulnerableCode is Django project which aggregates data about software vulnerabilities from multiple sources and transforms it into an easy to use format.

Things acheived in GSoC

sbs2001

(vt) shivam@shivam-ux430:~/coding/opensource/scancode-toolkit$ ./configure 
* Installing components ...
Looking in links: /home/shivam/coding/opensource/scancode-toolkit/thirdparty
Obtaining file:///home/shivam/coding/opensource/scancode-toolkit (from -r /home/shivam/coding/opensource/scancode-toolkit/etc/conf/requirements_base.txt (line 10))
Processing ./thirdparty/certifi-2018.4.16-py2.py3-none-any.whl
Requirement already up-to-date: setuptools in ./lib/python3.8/site-packages (from -r /home/shivam/coding/opensource/scancode-toolkit/etc/conf/requirements_base.txt (line 3)) (46.1.3)
Requirement already up-to-date: wheel in ./lib/python3.8/site-packages (from -r /home/shivam/coding/opensource/scancode-toolkit/etc/conf/requirements_base.txt (line 4)) (0.34.2)
Requirement already up-to-date: pip in ./lib/python3.8/site-packages (from -r /home/shivam/coding/opensource/scancode-toolkit/etc/conf/requirements_base.txt (line 5)) (20.0.2)
Processing ./thirdparty/wincertstore-0.2-py2.py3-none-any.whl
Processing ./thir

sbs2001

(venv) shivam@shivam-ux430:~/coding/opensource/scancode-toolkit$ ./configure 
* Installing components ...
Looking in links: /home/shivam/coding/opensource/scancode-toolkit/thirdparty
Obtaining file:///home/shivam/coding/opensource/scancode-toolkit (from -r /home/shivam/coding/opensource/scancode-toolkit/etc/conf/requirements_base.txt (line 10))
Processing ./thirdparty/certifi-2018.4.16-py2.py3-none-any.whl
Requirement already up-to-date: setuptools in ./lib/python3.8/site-packages (from -r /home/shivam/coding/opensource/scancode-toolkit/etc/conf/requirements_base.txt (line 3)) (46.1.3)
Requirement already up-to-date: wheel in ./lib/python3.8/site-packages (from -r /home/shivam/coding/opensource/scancode-toolkit/etc/conf/requirements_base.txt (line 4)) (0.34.2)
Requirement already up-to-date: pip in ./lib/python3.8/site-packages (from -r /home/shivam/coding/opensource/scancode-toolkit/etc/conf/requirements_base.txt (line 5)) (20.0.2)
Processing ./thirdparty/wincertstore-0.2-py2.py3-none-any.whl
Processing ./th