The Gatekeeper, or a project gating system
Go to file
Clark Boylan 1fb7bd33e7 Prohibit invalid uri usages on localhost
The uri module could potentially be used to expose files within the
bubblewrap context either through its src or dest parameters or its url
parameter. In the case of src and dest we use zuuls utilility functions
to filter out invalid srcs and dests. In the case of url we have been
relying on an ansible bug that prevents request responses without a
status code from completing successfully due to an unchecked type
coercion.

This change adds our own check to url schemes and restricts it to http,
https, and ftp so that if ansible fixes their bugs zuul will continue to
do the right thing.

Then we add testing for all of the cases talked about above.

Change-Id: I527a4082c1ec5556e4c8347ff08b2e89ce0edaaa
Task: #40940
2020-09-23 18:59:52 +00:00
doc Update SKS Keyserver URLs 2020-09-23 16:30:11 +00:00
etc authentication config: add optional max_validity_time, skew 2019-12-10 16:39:29 +01:00
playbooks Block localhost shell tasks in untrusted playbooks 2020-07-21 19:18:10 +02:00
releasenotes/notes Merge "Add intermediate flag for jobs" 2020-09-23 08:38:04 +00:00
tests Prohibit invalid uri usages on localhost 2020-09-23 18:59:52 +00:00
tools Use npm mirrors in tox jobs 2020-07-28 22:21:17 +02:00
web UI: Enable horizontal scrolling on LogFile page 2020-09-16 08:02:27 +02:00
zuul Prohibit invalid uri usages on localhost 2020-09-23 18:59:52 +00:00
.coveragerc Revert "Revert "Switch to stestr"" 2018-05-17 08:33:40 -07:00
.dockerignore Add web/node_modules to dockerignore 2019-01-27 11:23:45 +01:00
.gitignore Revert "Revert "Create zuul/web/static on demand"" 2020-07-07 19:53:33 +02:00
.gitreview OpenDev Migration Patch 2019-04-19 19:25:28 +00:00
.mailmap Fix pep8 E127 violations 2012-09-26 14:23:10 +00:00
.stestr.conf Revert "Revert "Switch to stestr"" 2018-05-17 08:33:40 -07:00
.zuul.yaml Merge "Drop support for ansible 2.7" 2020-09-21 16:22:01 +00:00
COPYING Update README and add GPL license 2018-03-19 09:25:52 -07:00
Dockerfile Simplify dockerfile 2020-08-03 10:38:57 -07:00
LICENSE Initial commit. 2012-05-29 14:49:32 -07:00
MANIFEST.in Optimize canMerge using graphql 2020-02-28 09:43:56 +01:00
README.rst Support nodes setting 'auto' python-path 2019-09-19 10:28:53 +10:00
TESTING.rst Docs: fix stestr run example 2020-01-21 10:36:07 +01:00
bindep.txt Add the openafs-client package to the container image 2020-06-29 07:16:03 -07:00
reno.yaml Add reno configuration settings 2020-07-22 08:45:46 -07:00
requirements.txt Merge "ConfigItem*Exception : add failure context" 2020-09-23 13:34:12 +00:00
setup.cfg Drop support for python 3.5 2020-09-04 16:21:10 +02:00
setup.py Partial sync with OpenStack requirements. 2013-09-25 15:30:37 -07:00
test-requirements.txt Optimize canMerge using graphql 2020-02-28 09:43:56 +01:00
tox.ini Use npm mirrors in tox jobs 2020-07-28 22:21:17 +02:00

README.rst

Zuul

Zuul is a project gating system.

The latest documentation for Zuul v3 is published at: https://zuul-ci.org/docs/zuul/

If you are looking for the Edge routing service named Zuul that is related to Netflix, it can be found here: https://github.com/Netflix/zuul

If you are looking for the Javascript testing tool named Zuul, it can be found here: https://github.com/defunctzombie/zuul

Getting Help

There are two Zuul-related mailing lists:

zuul-announce

A low-traffic announcement-only list to which every Zuul operator or power-user should subscribe.

zuul-discuss

General discussion about Zuul, including questions about how to use it, and future development.

You will also find Zuul developers in the #zuul channel on Freenode IRC.

Contributing

To browse the latest code, see: https://opendev.org/zuul/zuul To clone the latest code, use git clone https://opendev.org/zuul/zuul

Bugs are handled at: https://storyboard.openstack.org/#!/project/zuul/zuul

Suspected security vulnerabilities are most appreciated if first reported privately following any of the supported mechanisms described at https://zuul-ci.org/docs/zuul/user/vulnerabilities.html

Code reviews are handled by gerrit at https://review.opendev.org

After creating a Gerrit account, use git review to submit patches. Example:

# Do your commits
$ git review
# Enter your username if prompted

Join #zuul on Freenode to discuss development or usage.

License

Zuul is free software. Most of Zuul is licensed under the Apache License, version 2.0. Some parts of Zuul are licensed under the General Public License, version 3.0. Please see the license headers at the tops of individual source files.

Python Version Support

Zuul requires Python 3. It does not support Python 2.

Since Zuul uses Ansible to drive CI jobs, Zuul can run tests anywhere Ansible can, including Python 2 environments.