refactor: move all remaining files to orig/ directory
Completed clean root directory structure: - Root now contains only: .git, .env, docs/, orig/ - Moved all remaining files and directories to orig/: - Config files (.claude, .dockerignore, .drone.yml, etc.) - All .env variants (except active .env) - Git config (.gitconfig, .github, .gitignore, etc.) - Tool configs (.golangci.yml, .revive.toml, etc.) - Documentation (*.md files, @prompts) - Build files (Dockerfiles, Makefile, go.mod, go.sum) - Docker compose files - All source directories (scripts, tests, tools, etc.) - Runtime directories (logs, monitoring, reports) - Dependency files (node_modules, lib, cache) - Special files (--delete) - Removed empty runtime directories (bin/, data/) V2 structure is now clean: - docs/planning/ - V2 planning documents - orig/ - Complete V1 codebase preserved - .env - Active environment config (not in git) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
Administrator
198
orig/.harness/audit-pipeline.yaml
Normal file
198
orig/.harness/audit-pipeline.yaml
Normal file
@@ -0,0 +1,198 @@
|
||||
pipeline:
|
||||
name: AuditPipeline
|
||||
identifier: AuditPipeline
|
||||
projectIdentifier: InternalProject
|
||||
orgIdentifier: Default
|
||||
tags: {}
|
||||
properties:
|
||||
ci:
|
||||
codebase:
|
||||
connectorRef: gitConnector
|
||||
repoName: mev-beta
|
||||
build: <+input>
|
||||
stages:
|
||||
- stage:
|
||||
name: SecurityAudit
|
||||
identifier: SecurityAudit
|
||||
description: Comprehensive security and code quality audit
|
||||
type: CI
|
||||
spec:
|
||||
cloneCodeRepo: true
|
||||
execution:
|
||||
steps:
|
||||
- step:
|
||||
type: Plugin
|
||||
name: Install Audit Tools
|
||||
identifier: installAuditTools
|
||||
spec:
|
||||
connectorRef: account.dockerhub
|
||||
image: golang:1.25
|
||||
shell: Sh
|
||||
envVariables:
|
||||
GOPROXY: "https://proxy.golang.org,direct"
|
||||
command: |
|
||||
go install github.com/securego/gosec/v2/cmd/gosec@latest
|
||||
go install github.com/golangci/golangci-lint/cmd/golangci-lint@v1.60.3
|
||||
go install github.com/kisielk/errcheck@latest
|
||||
go install golang.org/x/vuln/cmd/govulncheck@latest
|
||||
go install github.com/sonatype-nexus-community/nancy@latest
|
||||
go install github.com/mgechev/revive@latest
|
||||
go install github.com/praetorian-inc/gokart@latest
|
||||
go install github.com/alexkohler/nakedret/v2/cmd/nakedret@latest
|
||||
go install github.com/alexkohler/prealloc@latest
|
||||
go install github.com/timshannon/go-playground@latest
|
||||
go install github.com/remyoudompheng/go-misc/checklicenses@latest
|
||||
go install github.com/kyoh86/exportloopref/cmd/exportloopref@latest
|
||||
go install github.com/gordonklaus/ineffassign@latest
|
||||
- step:
|
||||
type: Plugin
|
||||
name: Fetch Dependencies
|
||||
identifier: fetchDependencies
|
||||
spec:
|
||||
connectorRef: account.dockerhub
|
||||
image: golang:1.25
|
||||
shell: Sh
|
||||
command: |
|
||||
go mod tidy
|
||||
go mod download
|
||||
- step:
|
||||
type: Plugin
|
||||
name: Run Quality Checks
|
||||
identifier: runQualityChecks
|
||||
spec:
|
||||
connectorRef: account.dockerhub
|
||||
image: golang:1.25
|
||||
shell: Sh
|
||||
command: |
|
||||
bash scripts/quality-check.sh
|
||||
- step:
|
||||
type: Plugin
|
||||
name: Run Dependency Scan
|
||||
identifier: runDependencyScan
|
||||
spec:
|
||||
connectorRef: account.dockerhub
|
||||
image: golang:1.25
|
||||
shell: Sh
|
||||
command: |
|
||||
bash scripts/dependency-scan.sh
|
||||
- step:
|
||||
type: Plugin
|
||||
name: Run Comprehensive Tests
|
||||
identifier: runComprehensiveTests
|
||||
spec:
|
||||
connectorRef: account.dockerhub
|
||||
image: golang:1.25
|
||||
shell: Sh
|
||||
command: |
|
||||
bash scripts/test-suite.sh
|
||||
- step:
|
||||
type: Plugin
|
||||
name: Run Code Security Audit
|
||||
identifier: runCodeSecurityAudit
|
||||
spec:
|
||||
connectorRef: account.dockerhub
|
||||
image: golang:1.25
|
||||
shell: Sh
|
||||
envVariables:
|
||||
GITHUB_TOKEN: <+secrets.getValue("github_token")>
|
||||
command: |
|
||||
mkdir -p audit-reports
|
||||
golangci-lint run --timeout=10m --out-format=checkstyle:audit-reports/golangci-report.xml
|
||||
gosec -quiet -fmt=sarif -out=audit-reports/gosec-results.sarif ./...
|
||||
govulncheck -json ./... > audit-reports/vulncheck-results.json || true
|
||||
revive -config .revive.toml -formatter json ./... > audit-reports/revive-results.json || true
|
||||
- step:
|
||||
type: Plugin
|
||||
name: Run Additional Security Tools
|
||||
identifier: runAdditionalSecurityTools
|
||||
spec:
|
||||
connectorRef: account.dockerhub
|
||||
image: golang:1.25
|
||||
shell: Sh
|
||||
command: |
|
||||
gokart scan -r . -reportType json -output audit-reports/gokart-results.json
|
||||
errcheck -blank -json ./... > audit-reports/errcheck-results.json || true
|
||||
ineffassign -json ./... > audit-reports/ineffassign-results.json || true
|
||||
- step:
|
||||
type: Plugin
|
||||
name: Aggregate Audit Results
|
||||
identifier: aggregateAuditResults
|
||||
spec:
|
||||
connectorRef: account.dockerhub
|
||||
image: golang:1.25
|
||||
shell: Sh
|
||||
command: |
|
||||
cat << 'EOF' > audit-reports/summary.md
|
||||
# Audit Summary Report
|
||||
|
||||
## Quality Checks
|
||||
- Formatting: ✅
|
||||
- vet: ✅
|
||||
- errcheck: ✅
|
||||
- staticcheck: ✅
|
||||
- ineffassign: ✅
|
||||
|
||||
## Security Scans
|
||||
- GoSec: ✅
|
||||
- govulncheck: ✅
|
||||
- gokart: ✅
|
||||
|
||||
## Dependencies
|
||||
- Vulnerability scan: ✅
|
||||
- License check: ✅
|
||||
|
||||
## Tests
|
||||
- Unit: ✅
|
||||
- Race detection: ✅
|
||||
- Coverage: ✅
|
||||
|
||||
For detailed results, see individual reports in the audit-reports directory.
|
||||
EOF
|
||||
cat audit-reports/summary.md
|
||||
platform:
|
||||
os: Linux
|
||||
arch: Amd64
|
||||
infrastructure:
|
||||
type: KubernetesDirect
|
||||
spec:
|
||||
connectorRef: your_k8s_connector
|
||||
namespace: default
|
||||
automountServiceAccountToken: false
|
||||
nodeSelector: {}
|
||||
os: Linux
|
||||
when:
|
||||
stageStatus: Success
|
||||
- stage:
|
||||
name: PublishAuditResults
|
||||
identifier: PublishAuditResults
|
||||
description: Publish audit results to reporting system
|
||||
type: CI
|
||||
spec:
|
||||
cloneCodeRepo: false
|
||||
execution:
|
||||
steps:
|
||||
- step:
|
||||
type: Plugin
|
||||
name: Upload Audit Artifacts
|
||||
identifier: uploadAuditArtifacts
|
||||
spec:
|
||||
connectorRef: account.dockerhub
|
||||
image: golang:1.25
|
||||
shell: Sh
|
||||
command: |
|
||||
# Upload audit reports as build artifacts
|
||||
# This would typically involve uploading to an artifact repository
|
||||
# or cloud storage depending on your setup
|
||||
echo "Uploading audit reports..."
|
||||
ls -la audit-reports/
|
||||
# Add actual upload commands based on your artifact storage solution
|
||||
infrastructure:
|
||||
type: KubernetesDirect
|
||||
spec:
|
||||
connectorRef: your_k8s_connector
|
||||
namespace: default
|
||||
automountServiceAccountToken: false
|
||||
nodeSelector: {}
|
||||
os: Linux
|
||||
when:
|
||||
stageStatus: Any
|
||||
Reference in New Issue
Block a user