version

.batect/agent_deco.sh

@@ -0,0 +1,18 @@
+#!/usr/bin/env sh
+
+######################################################################
+# @author      : bidaya0 (bidaya0@$HOSTNAME)
+# @file        : agent_deco
+# @created     : 星期二 1月 25, 2022 18:17:45 CST
+#
+# @description : 
+######################################################################
+
+
+
+if [ "$PYTHONAGENT" = "TRUE" ]; then
+	curl -X GET "${DONGTAI_IAST_BASE_URL}/api/v1/agent/download?url=${DONGTAI_IAST_BASE_URL}&language=python&projectName=${PROJECT_NAME}" -H "Authorization: Token ${DONGTAI_AGNET_TOKEN}" -o dongtai-agent-python.tar.gz -k
+	pip install dongtai-agent-python.tar.gz
+fi
+
+sh $@

.batect/manage_run_server.sh

@@ -0,0 +1,11 @@
+#!/usr/bin/env sh
+
+######################################################################
+# @author      : bidaya0 (bidaya0@$HOSTNAME)
+# @file        : manage_run_server
+# @created     : 星期二 1月 25, 2022 10:39:21 CST
+#
+# @description : 
+######################################################################
+
+python manage.py runserver 0.0.0.0:8000

.batect/manage_test.sh

@@ -0,0 +1,11 @@
+#!/usr/bin/env sh
+
+######################################################################
+# @author      : bidaya0 (bidaya0@$HOSTNAME)
+# @file        : manage_run_server
+# @created     : 星期二 1月 25, 2022 10:39:21 CST
+#
+# @description : 
+######################################################################
+
+python manage.py test 

.dockerignore

@@ -1,6 +1,45 @@
 /venv
 /*.docx
+*.DS_Store
+/venv
+*/__pycache__/*
+*/migrations/*
+*.pyc
+.idea/
+scaapi/cron/logs/sca.log
+*.docx
+db/*
+#Dockerfile
+doc/*
+doc/example.json
+conf/config.ini
+logs/*.log
+build_docker.sh
+dongtai_py_agent.log
+/venv
+/*.docx
 .git
 .idea
 /logs/*.log
 build_docker.sh
+*.DS_Store
+/venv
+*/__pycache__/*
+*/migrations/*
+*.pyc
+.idea/
+scaapi/cron/logs/sca.log
+iast/upload/reports/*
+db/*
+conf/config.ini
+#Dockerfile
+doc
+doc/example.json
+logs/*.log
+build_docker.sh
+iast-package
+config.ini
+/venv
+/*.docx
+.git
+.idea

.github/CODE_OF_CONDUCT.md

@@ -0,0 +1,3 @@
+# DongTai Community Code of Conduct
+
+This project follows the [CNCF Code of Conduct](https://github.com/cncf/foundation/blob/master/code-of-conduct.md).

.github/ISSUE_TEMPLATE/bug_report.yaml

@@ -0,0 +1,81 @@
+name: 🐛 Bug report
+description: Report a bug to help us improve DongTai
+title: "[Bug]: "
+labels: [bug]
+body:
+- type: markdown
+  attributes:
+    value: |
+      Thank you for submitting a bug report!
+
+      Please fill out the template below to make it easier to debug your problem.
+
+      If you are not sure if it is a bug or not, you can contact us via the available [support channels](https://github.com/HXSecurity/DongTai/issues/new/choose).
+- type: checkboxes
+  attributes:
+    label: Preflight Checklist
+    description: Please ensure you've completed all of the following.
+    options:
+      - label: I agree to follow the [Code of Conduct](https://github.com/HXSecurity/DongTai/blob/main/.github/CODE_OF_CONDUCT.md) that this project adheres to.
+        required: true
+      - label: I have searched the [issue tracker](https://www.github.com/HXSecurity/DongTai/issues) for an issue that matches the one I want to file, without success.
+        required: true
+      - label: I am not looking for support or already pursued the available [support channels](https://github.com/HXSecurity/DongTai/issues/new/choose) without success.
+        required: true
+- type: input
+  attributes:
+    label: Version
+    description: What version of DongTai are you running?
+    placeholder: 1.0.0
+  validations:
+    required: true
+- type: dropdown
+  attributes:
+    label: Installation Type
+    description: How did you install DongTai?
+    options:
+      - Official SaaS Service
+      - Official Kubernetes
+      - Official Docker Compose
+      - Other (specify below)
+  validations:
+    required: true
+- type: dropdown
+  attributes:
+    label: Service Name
+    description: Which service do you want to report the bug?
+    options:
+      - Doc(DongTai-Doc)
+      - Docker(DongTai-Base-Image)
+      - Deploy(DongTai-deploy)
+      - DongTai-Web
+      - DongTai-WebAPI
+      - DongTai-OpenAPI
+      - DongTai-Engine
+      - DongTai-Core
+      - DongTai-agent-python
+      - DongTai-agent-java
+      - DongTai-agent-php
+    multiple: true
+  validations:
+    required: true
+- type: textarea
+  attributes:
+    label: Describe the details of the bug and the steps to reproduce it
+    description: Steps to reproduce the behavior if it is not self-explanatory.
+    placeholder: |
+      1. In this environment...
+      2. With this config...
+      3. Do something...
+      4. See error...
+  validations:
+    required: true
+- type: textarea
+  attributes:
+    label: Additional Information
+    description: Links? References? Anything that will give us more context about the issue that you are encountering!
+- type: textarea
+  attributes:
+    label: Logs
+    description: Dex application logs (if relevant).
+    render: shell

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,9 @@
+blank_issues_enabled: false
+contact_links:
+  - name: ❓ Ask a question
+    url: https://github.com/HXSecurity/DongTai/discussions/new?category=q-a
+    about: Ask and discuss questions with other DongTai community members
+
+  - name: 📚 Documentation
+    url: https://hxsecurity.github.io/DongTaiDoc
+    about: Check the documentation for help

.github/ISSUE_TEMPLATE/feature_request.yaml

@@ -0,0 +1,42 @@
+name: 🚀 Feature request
+description: Suggest an idea for DongTai
+title: "[Feature]: "
+labels: [feature, ]
+body:
+- type: markdown
+  attributes:
+    value: |
+      Thank you for submitting a feature request!
+
+      Please describe what you would like to change/add and why in detail by filling out the template below.
+
+      If you are not sure if your request fits into DongTai, you can contact us via the available [support channels](https://github.com/HXSecurity/DongTai/issues/new/choose).
+- type: checkboxes
+  attributes:
+    label: Preflight Checklist
+    description: Please ensure you've completed all of the following.
+    options:
+      - label: I agree to follow the [Code of Conduct](https://github.com/HXSecurity/DongTai/blob/main/.github/CODE_OF_CONDUCT.md) that this project adheres to.
+        required: true
+      - label: I have searched the [issue tracker](https://www.github.com/HXSecurity/DongTai/issues) for an issue that matches the one I want to file, without success.
+        required: true
+- type: textarea
+  attributes:
+    label: Problem Description
+    description: A clear and concise description of the problem you are seeking to solve with this feature request.
+  validations:
+    required: true
+- type: textarea
+  attributes:
+    label: Proposed Solution
+    description: A clear and concise description of what would you like to happen.
+  validations:
+    required: true
+- type: textarea
+  attributes:
+    label: Alternatives Considered
+    description: A clear and concise description of any alternative solutions or features you've considered.
+- type: textarea
+  attributes:
+    label: Additional Information
+    description: Add any other context about the problem here.

.github/ISSUE_TEMPLATE/vul_scan_report.yaml

@@ -0,0 +1,63 @@
+name: "🔍 False positives/negatives vulnerability report"
+description: "Report a false positives/negatives vulnerability to help us improve DongTai vulnerability detection. "
+title: "[Vulnerability Detect]: "
+labels: [detection]
+body:
+- type: markdown
+  attributes:
+    value: |
+      Thank you for submitting a vulnerability detection report!
+
+      Please fill out the template below to make it easier to debug your problem.
+
+      If you are not sure if it is a bug or not, you can contact us via the available [support channels](https://github.com/HXSecurity/DongTai/issues/new/choose).
+- type: checkboxes
+  attributes:
+    label: Preflight Checklist
+    description: Please ensure you've completed all of the following.
+    options:
+      - label: I agree to follow the [Code of Conduct](https://github.com/HXSecurity/DongTai/blob/main/.github/CODE_OF_CONDUCT.md) that this project adheres to.
+        required: true
+      - label: I have searched the [issue tracker](https://www.github.com/HXSecurity/DongTai/issues) for an issue that matches the one I want to file, without success.
+        required: true
+      - label: I am not looking for support or already pursued the available [support channels](https://github.com/HXSecurity/DongTai/issues/new/choose) without success.
+        required: true
+- type: input
+  attributes:
+    label: Version
+    description: What version of DongTai are you running?
+    placeholder: 1.0.0
+  validations:
+    required: true
+- type: dropdown
+  attributes:
+    label: Installation Type
+    description: How did you install DongTai?
+    options:
+      - Official SaaS Service
+      - Official Kubernetes
+      - Official Docker Compose
+      - Other (specify below)
+  validations:
+    required: true
+- type: textarea
+  attributes:
+    label: Describe the details of the bug and the steps to reproduce it
+    description: Steps to reproduce the behavior if it is not self-explanatory.
+    placeholder: |
+      1. Detect false positives and false negatives:
+      2. Provide reproducible code (if any)
+      3. Screenshot of IAST code call chain:
+      4. Vulnerability Type:
+      5. Details (details explain the reasons and logic for judging false positives and false negatives):
+  validations:
+    required: true
+- type: textarea
+  attributes:
+    label: Additional Information
+    description: Links? References? Anything that will give us more context about the issue that you are encountering!
+- type: textarea
+  attributes:
+    label: Logs
+    description: Dex application logs (if relevant).
+    render: shell