Skip to content

Commit

Permalink
Cleanup repo
Browse files Browse the repository at this point in the history
Remove trailing whitespaces
Add end of file line
Check yamls
  • Loading branch information
DoPaNik committed Dec 8, 2023
1 parent 1cef4a1 commit 8319208
Show file tree
Hide file tree
Showing 17 changed files with 34 additions and 28 deletions.
2 changes: 1 addition & 1 deletion .github/dependabot.yml
Original file line number Diff line number Diff line change
Expand Up @@ -3,4 +3,4 @@ updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "daily"
interval: "daily"
2 changes: 1 addition & 1 deletion .github/workflows/buildAndPushContainer.yml
Original file line number Diff line number Diff line change
Expand Up @@ -70,4 +70,4 @@ jobs:
ignore-unchanged: true
only-severities: critical,high
write-comment: true
github-token: ${{ secrets.GH_TOKEN }}
github-token: ${{ secrets.GH_TOKEN }}
2 changes: 1 addition & 1 deletion .github/workflows/simpleCiPipeline.yml
Original file line number Diff line number Diff line change
Expand Up @@ -25,4 +25,4 @@ jobs:

- name: Build 🏗️
run: npm run build
working-directory: ./0_devops/2_praxis/ContinuousIntegration/Demo/react-app
working-directory: ./0_devops/2_praxis/ContinuousIntegration/Demo/react-app
7 changes: 7 additions & 0 deletions .pre-commit-config.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
repos:
- repo: https://github.com/pre-commit/pre-commit-hooks
rev: v4.5.0
hooks:
- id: trailing-whitespace
- id: end-of-file-fixer
- id: check-yaml
5 changes: 2 additions & 3 deletions 0_devops/1_theorie/Einführung.md
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# DevOps:
# DevOps:

![DevOps](../99_assets/images/devops-cycle.jpeg)

Expand All @@ -15,7 +15,7 @@ DevOps ist eine Kultur und Praktik, die auf den Prinzipien von Continuous Integr

> “It is not the strongest or the most intelligent who will survive but those who can best adapt to change.” Leon C. Megginson
> “DevOps, a movement of people who care about developing and operating reliable, secure, high performance systems at scale, has always — intentionally — lacked a definition or manifesto”. John Willis
> “DevOps, a movement of people who care about developing and operating reliable, secure, high performance systems at scale, has always — intentionally — lacked a definition or manifesto”. John Willis
### Referenzen und weiterführende Links

Expand All @@ -26,4 +26,3 @@ DevOps ist eine Kultur und Praktik, die auf den Prinzipien von Continuous Integr
- [The DevOps Handbook: How to Create World-Class Agility, Reliability, and Security in Technology Organizations](https://www.goodreads.com/book/show/26083308-the-devops-handbook)
- [Accelerate: The Science of Lean Software and DevOps: Building and Scaling High Performing Technology Organizations](https://www.goodreads.com/book/show/39080433-accelerate)
- [The Phoenix Project: A Novel about IT, DevOps, and Helping Your Business Win](https://www.goodreads.com/book/show/17255186-the-phoenix-project)

Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
6 changes: 3 additions & 3 deletions 0_devops/99_assets/images/devops-history.svg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
6 changes: 3 additions & 3 deletions 0_devops/99_assets/images/threeWaysOfDevOps.svg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
2 changes: 1 addition & 1 deletion 0_devops/README.md
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# DevOps

- [Einführung](./1_theorie/Einführung.md)
- [Fortgeschritten](./1_theorie/Fortgeschritten.md)
- [Fortgeschritten](./1_theorie/Fortgeschritten.md)
2 changes: 1 addition & 1 deletion 1_security/1_theorie/SecurityAutomatisierung.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,4 +6,4 @@

## Security Observability

![SIEM](../99_assets/images/siem.png)
![SIEM](../99_assets/images/siem.png)
2 changes: 1 addition & 1 deletion 1_security/1_theorie/SecurityKultur.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,4 +3,4 @@

## Security Champions

![Security Champions](../99_assets/images/security_champions.png)
![Security Champions](../99_assets/images/security_champions.png)
10 changes: 5 additions & 5 deletions 1_security/1_theorie/ÜbersichtSecInDevOps.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,13 +11,13 @@ Mittels der Bedrohungsmodellierung (Threat Modeling) können frühzeitig potenzi

Die Bedrohungsmodellierung wird in de nachfolgend beschriebenen Schritten durchgeführt:

1. __Erstellung eines Abbilds über das System__ (_What are we working on?_):
1. __Erstellung eines Abbilds über das System__ (_What are we working on?_):
Mit Hilfe geeigneter Diagramme wie z.B. mit einem Datenflussdiagram wird visualisiert, wie das System aufgebaut ist und wie Daten über diverse Übertragungsprotokolle durch das System fließen.
2. __Identifikation von Bedrohungen und Schwachstellen__ (_What can go wrong?_):
2. __Identifikation von Bedrohungen und Schwachstellen__ (_What can go wrong?_):
Auf Basis des Systemabbilds werden im zweiten Schritt potenzielle Bedrohungen und Schwachstellen ermittelt. Dies erfolgt mit unterschiedlichen Methoden wie z.B. der [STRIDE]() Methode.
3. __Definition und Umsetzung von Gegenmaßnahmen und Strategien zum Umgang mit den Bedrohungen und Schwachstellen__ (_What are we going to do about it?_):
3. __Definition und Umsetzung von Gegenmaßnahmen und Strategien zum Umgang mit den Bedrohungen und Schwachstellen__ (_What are we going to do about it?_):
Für jede der gefundenen Bedrohungen und Schwachstellen müssen dann Sicherheitsmassnahmen definiert und umgesetzt werden um die damit verbundenen Risiken zu mindern.
4. __Retrospektive__ (_Did we do a good enough job?_):
4. __Retrospektive__ (_Did we do a good enough job?_):
Im letzten Schritt wird geprüft, ob das Threat Model vollständig ist und alle wesentlichen Risiken erkannt und behandelt wurden. Darüber hinaus wird laufend die Effizienz des Threat Modeling Prozesses überprüft.

### Application Security Verification Standard
Expand All @@ -35,4 +35,4 @@ Im letzten Schritt wird geprüft, ob das Threat Model vollständig ist und alle

- [Threat Modeling Manifesto](https://www.threatmodelingmanifesto.org/)
- [OWASP ASVS](https://github.com/OWASP/ASVS)
- [CALMS: The DevOps Culture Model](https://www.atlassian.com/devops)
- [CALMS: The DevOps Culture Model](https://www.atlassian.com/devops)
2 changes: 1 addition & 1 deletion 1_security/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,4 +2,4 @@

- [Security (in DevOps)](./1_theorie/ÜbersichtSecInDevOps.md)
- [Security Automatisierung](./1_theorie/SecurityAutomatisierung.md)
- [Security Culture](./1_theorie/SecurityKultur.md)
- [Security Culture](./1_theorie/SecurityKultur.md)
6 changes: 3 additions & 3 deletions 2_supplychain/99_assets/images/app-pipeline.svg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
2 changes: 1 addition & 1 deletion 99_assets/excalidraw/DevOpsHistroy.excalidraw
Original file line number Diff line number Diff line change
Expand Up @@ -3143,4 +3143,4 @@
"viewBackgroundColor": "#ffffff"
},
"files": {}
}
}
2 changes: 1 addition & 1 deletion 99_assets/excalidraw/threeWaysOfDevOps.excalidraw
Original file line number Diff line number Diff line change
Expand Up @@ -591,4 +591,4 @@
"viewBackgroundColor": "#ffffff"
},
"files": {}
}
}
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -46,4 +46,4 @@ Das Repository ist nach den Workshop-Bereichen strukturiert. Jeder Bereich enth

## Umfrage zur Erwartungshaltung

//TODO: Link zur Umfrage einfügen
//TODO: Link zur Umfrage einfügen

0 comments on commit 8319208

Please sign in to comment.