cwielenb/CNCF-Dataset huggingface dataset:
Project: ClickHouse (App Definition and Development / Database)
File: v22.3.11.12-lts.md

sidebar_position: 1 sidebar_label: 2022 Backported in : Former packages used to install systemd.service file to `/etc`. The files there are marked as `conf` and are not cleaned out, and not updated automatically. This PR cleans them out. (). Backported in : Fix `parallelviewprocessing=1` with `optimizetrivialinsertselect=1`. Fix `maxinsert_threads` while pushing to views. (). NO CL ENTRY: 'Revert "Backport to 22.3: Fix seeking while reading from encrypted disk"'. ().
Project: KICS (Provisioning / Security & Compliance)
File: c583f0f9-7dfd-476b-a056-f47c62b47b46.md

title: Role With Privilege Escalation By Actions 'lambda:UpdateFunctionCode' hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: c583f0f9-7dfd-476b-a056-f47c62b47b46 Query name: Role With Privilege Escalation By Actions 'lambda:UpdateFunctionCode' Platform: Terraform Severity: <span style="color:#ff7213">Medium</span> Category: Access Control URL: Role with privilege escalation by actions 'lambda:UpdateFunctionCode' and Resource set to '*'. For more information see https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/.<br> ```tf title="Positive test num. 1 - tf file" hl_lines="1" resource "awsiamrole" "cosmic" { name = "cosmic" } resource "awsiamrolepolicy" "testinline_policy" { name = "testinlinepolicy" role = awsiamrole.cosmic.name policy = jsonencode({ Version = "2012-10-17" Statement = [ { Action = [ "lambda:UpdateFunctionCode", ] Effect = "Allow" Resource = "*" }, ] }) } ``` ```tf title="Negative test num. 1 - tf file" resource "awsiamuser" "cosmic2" { name = "cosmic2" } resource "awsiamuserpolicy" "inlinepolicyruninstances2" { name = "inlinepolicyrun_instances" user = awsiamuser.cosmic2.name policy = jsonencode({ Version = "2012-10-17" Statement = [ { Action = [ "ec2:Describe*", ] Effect = "Allow" Resource = "*" }, ] }) } ```
Project: KICS (Provisioning / Security & Compliance)
File: 445dce51-7e53-4e50-80ef-7f94f14169e4.md

title: Route53 Record Undefined hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 445dce51-7e53-4e50-80ef-7f94f14169e4 Query name: Route53 Record Undefined Platform: Ansible Severity: <span style="color:#bb2124">High</span> Category: Networking and Firewall URL: Route53 Record should have a list of records<br> ```yaml title="Positive test num. 1 - yaml file" hl_lines="3 14" name: Use a routing policy to distribute traffic02 community.aws.route53: state: present zone: foo.com record: www.foo.com type: CNAME value: ttl: 30 identifier: "host1@www" weight: 100 health_check: "d994b780-3150-49fd-9205-356abdd42e75" name: Use a routing policy to distribute traffic03 community.aws.route53: state: present zone: foo.com record: www.foo.com type: CNAME ttl: 30 identifier: "host1@www" weight: 100 health_check: "d994b780-3150-49fd-9205-356abdd42e75" ``` ```yaml title="Negative test num. 1 - yaml file" name: Use a routing policy to distribute traffic community.aws.route53: state: present zone: foo.com record: www.foo.com type: CNAME value: host1.foo.com ttl: 30 identifier: host1@www weight: 100 health_check: d994b780-3150-49fd-9205-356abdd42e75 ```
Project: StarRocks (App Definition and Development / Database)
File: cosh.md

displayed_sidebar: "English" Computes the hyperbolic cosine of the argument. This function is supported from v3.0. ```Haskell DOUBLE cosh(DOUBLE arg) ``` `arg`: You can specify only a numeric value. This function converts the numeric value into a DOUBLE value before it computes the hyperbolic cosine of the value. Returns a value of the DOUBLE data type. If you specify a non-numeric value, this function returns `NULL`. ```Plain mysql> select cosh(-1); +--+ | cosh(-1) | +--+ | 1.5430806348152437 | +--+ mysql> select cosh(0); ++ | cosh(0) | ++ | 1 | ++ mysql> select cosh(1); +--+ | cosh(1) | +--+ | 1.5430806348152437 | +--+ mysql> select cosh(""); +-+ | cosh('') | +-+ | NULL | +-+ ``` COSH
Project: KICS (Provisioning / Security & Compliance)
File: f20e97f9-4919-43f1-9be9-f203cd339cdd.md

title: OSS Bucket Encryption Using CMK Disabled hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: f20e97f9-4919-43f1-9be9-f203cd339cdd Query name: OSS Bucket Encryption Using CMK Disabled Platform: Terraform Severity: <span style="color:#ff7213">Medium</span> Category: Encryption URL: OSS Bucket should have encryption enabled using Customer Master Key<br> ```tf title="Positive test num. 1 - tf file" hl_lines="5" resource "alicloudossbucket" "bucketcmkencryption2" { bucket = "bucket-170309-sserule" acl = "private" serversideencryption_rule { sse_algorithm = "AES256" } } ``` ```tf title="Positive test num. 2 - tf file" hl_lines="1" resource "alicloudossbucket" "bucketcmkencryption3" { bucket = "bucket-170309-sserule" acl = "private" } ``` ```tf title="Negative test num. 1 - tf file" resource "alicloudossbucket" "bucketcmkencryption1" { bucket = "bucket-170309-sserule" acl = "private" serversideencryption_rule { sse_algorithm = "KMS" kmsmasterkey_id = "your kms key id" } } ```
Project: Tremor (App Definition and Development / Streaming & Messaging)
File: query.md

The `Query` rule defines the logical entry point into Tremor's statement oriented query grammar. The grammar is embedded into deployments via `define pipeline` statements. Pipelines effectively provide a continous streaming abstraction for event processing. The pipeline query is a graph of connected streams and operators. The operators can be builtin or provided by users through the `script` operator. Window definitions for use in windowed statements such as those supported by the `select` operation are also defined and named so that they can be used by multiple operations and to compose tilt frames - chains of successive windows of data in a streaming continuous select operation. The syntax supports the definition of sub queries through the same `define pipeline` syntax as in the deployment grammar.
Project: KICS (Provisioning / Security & Compliance)
File: 5c0003fb-9aa0-42c1-9da3-eb0e332bef21.md

title: Secure Ciphers Disabled hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 5c0003fb-9aa0-42c1-9da3-eb0e332bef21 Query name: Secure Ciphers Disabled Platform: Terraform Severity: <span style="color:#ff7213">Medium</span> Category: Encryption URL: Check if secure ciphers aren't used in CloudFront<br> ```tf title="Positive test num. 1 - tf file" hl_lines="42" resource "awscloudfrontdistribution" "positive1" { origin { domain_name = "mybucket" origin_id = "myS3Origin" s3originconfig { originaccessidentity = "origin-access-identity/cloudfront/ABCDEFG1234567" } } enabled = true defaultcachebehavior { allowed_methods = ["DELETE", "GET", "HEAD", "OPTIONS", "PATCH", "POST", "PUT"] cached_methods = ["GET", "HEAD"] targetoriginid = "myS3Origin" forwarded_values { query_string = false cookies { forward = "none" } } viewerprotocolpolicy = "allow-all" min_ttl = 0 default_ttl = 3600 max_ttl = 86400 } restrictions { geo_restriction { restriction_type = "whitelist" locations = ["US", "CA", "GB", "DE"] } } viewer_certificate { cloudfrontdefaultcertificate = false minimumprotocolversion = "SSLv3" } } ``` ```tf title="Negative test num. 1 - tf file" resource "awscloudfrontdistribution" "negative1" { origin { domain_name = "mybucket" origin_id = "myS3Origin" s3originconfig { originaccessidentity = "origin-access-identity/cloudfront/ABCDEFG1234567" } } enabled = true defaultcachebehavior { allowed_methods = ["DELETE", "GET", "HEAD", "OPTIONS", "PATCH", "POST", "PUT"] cached_methods = ["GET", "HEAD"] targetoriginid = "myS3Origin" forwarded_values { query_string = false cookies { forward = "none" } } viewerprotocolpolicy = "allow-all" min_ttl = 0 default_ttl = 3600 max_ttl = 86400 } restrictions { geo_restriction { restriction_type = "whitelist" locations = ["US", "CA", "GB", "DE"] } } viewer_certificate { cloudfrontdefaultcertificate = true } } ``` ```tf title="Negative test num. 2 - tf file" resource "awscloudfrontdistribution" "negative1" { origin { domain_name = "mybucket" origin_id = "myS3Origin" s3originconfig { originaccessidentity = "origin-access-identity/cloudfront/ABCDEFG1234567" } } enabled = true defaultcachebehavior { allowed_methods = ["DELETE", "GET", "HEAD", "OPTIONS", "PATCH", "POST", "PUT"] cached_methods = ["GET", "HEAD"] targetoriginid = "myS3Origin" forwarded_values { query_string = false cookies { forward = "none" } } viewerprotocolpolicy = "allow-all" min_ttl = 0 default_ttl = 3600 max_ttl = 86400 } restrictions { geo_restriction { restriction_type = "whitelist" locations = ["US", "CA", "GB", "DE"] } } viewer_certificate { cloudfrontdefaultcertificate = true minimumprotocolversion = "TLSv1.2_2019" } } ```
Project: Apache Spark (App Definition and Development / Streaming & Messaging)
File: sql-ref-syntax-hive-format.md

layout: global title: Hive Row Format displayTitle: Hive Row Format license: | Licensed to the Apache Software Foundation (ASF) under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to You under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. Spark supports a Hive row format in `CREATE TABLE` and `TRANSFORM` clause to specify serde or text delimiter. There are two ways to define a row format in `row_format` of `CREATE TABLE` and `TRANSFORM` clauses. `SERDE` clause to specify a custom SerDe class. `DELIMITED` clause to specify a delimiter, an escape character, a null character, and so on for the native SerDe. ```sql row_format: SERDE serde_class [ WITH SERDEPROPERTIES (k1=v1, k2=v2, ... ) ] | DELIMITED [ FIELDS TERMINATED BY fieldsterminatedchar [ ESCAPED BY escaped_char ] ] [ COLLECTION ITEMS TERMINATED BY collectionitemsterminated_char ] [ MAP KEYS TERMINATED BY mapkeyterminated_char ] [ LINES TERMINATED BY rowterminatedchar ] [ NULL DEFINED AS null_char ] ``` SERDE serde_class* Specifies a fully-qualified class name of custom SerDe. SERDEPROPERTIES* A list of key-value pairs that is used to tag the SerDe definition. FIELDS TERMINATED BY* Used to define a column separator. COLLECTION ITEMS TERMINATED BY* Used to define a collection item separator. MAP KEYS TERMINATED BY* Used to define a map key separator. LINES TERMINATED BY* Used to define a row separator. NULL DEFINED AS* Used to define the specific value for NULL. ESCAPED BY* Used for escape mechanism.
Project: Vald (App Definition and Development / Database)
File: security_issue_report.md

name: Security issue report about: Create a report of security issue title: "" labels: "type/security, priority/medium, team/core, team/sre" assignees: "" <!-- A clear and concise description of what the issue is. --> <! Please change the versions below along with your environment --> Go Version: 1.22.3 Rust Version: 1.77.2 Docker Version: 20.10.8 Kubernetes Version: v1.30.0 NGT Version: 2.2.1
Project: Backstage (App Definition and Development / Application Definition & Image Build)
File: adr000-template.md

id: adrs-adr000 title: 'ADR000: [TITLE]' description: Architecture Decision Record (ADR) for [TITLE] [DESCRIPTION] <!-- These documents have names that are short noun phrases. For example, "ADR001: Deployment on Ruby on Rails 3.0.10" or "ADR009: LDAP for Multitenant Integration" --> <!-- This section describes the forces at play, including technological, political, social, and project local. These forces are probably in tension, and should be called out as such. The language in this section is value-neutral. It is simply describing facts. --> <!-- This section describes our response to these forces. It is stated in full sentences, with active voice. "We will ..." --> <!-- This section describes the resulting context, after applying the decision. All consequences should be listed here, not just the "positive" ones. A particular decision may have positive, negative, and neutral consequences, but all of them affect the team and project in the future. --> <!-- This template is taken from a blog post by Michael Nygard http://thinkrelevance.com/blog/2011/11/15/documenting-architecture-decisions -->
Project: Tremor (App Definition and Development / Streaming & Messaging)
File: index.md

Tremor is shipped with a standard library that contains as set of functions, constants and definitions to be used within Troy, Tremor Pipeline or Tremor Script code. This module contains utilities that cover common scripting functions This module contains runtime type utility functions This module contains cloud native utility functions This module contains aggregate functions This module contains helpful predefined connectors, pipelines and flows to be used in troy files.
Project: Harbor (Provisioning / Container Registry)
File: 11-04-filter-images-by-label.md

Test 11-04 - Filter images by label ======= To verify that the images can be filtered by labels. User guide This test requires that a Harbor instance is running and available. Create at least two labels and add one of them to an image. The project guest user logs in to the UI. The user filters the images by the label that has been added to the image. The user filters the images by the label that has not been added to the image. In Step2, the image list contains the image which is labeled. In Step3, the image list doesn't contain the image which is labeled. None
Project: RabbitMQ (App Definition and Development / Streaming & Messaging)
File: rabbitmq-quorum-queues-raft-11340.md

Raft state for all Quorum Queues running in a RabbitMQ cluster RabbitMQ Helps understand the state of all Raft members running the Quorum Queues in a RabbitMQ 3.8.x cluster. Metrics displayed: Log entries committed / s Log entry commit latency Uncommitted log entries Leader elections / s Raft members with >5k entries in the log Filter by: RabbitMQ Cluster Depends on `rabbitmq-prometheus` plugin, built-in since Learn more about To get it working locally with RabbitMQ in 3 simple steps, follow this
Project: ko (App Definition and Development / Application Definition & Image Build)
File: ko_build.md

Build and publish container images from the given importpaths. This sub-command builds the provided import paths into Go binaries, containerizes them, and publishes them. ``` ko build IMPORTPATH... [flags] ``` ``` ko build github.com/foo/bar/cmd/baz github.com/foo/bar/cmd/blah ko build ./cmd/blah ko build --preserve-import-paths ./cmd/blah ko build --local github.com/foo/bar/cmd/baz github.com/foo/bar/cmd/blah ``` ``` --bare Whether to just use KODOCKERREPO without additional context (may not work properly with --tags). -B, --base-import-paths Whether to use the base path without MD5 hash after KODOCKERREPO (may not work properly with --tags). --disable-optimizations Disable optimizations when building Go code. Useful when you want to interactively debug the created container. -h, --help help for build --image-label strings Which labels (key=value) to add to the image. --image-refs string Path to file where a list of the published image references will be written. --insecure-registry Whether to skip TLS verification on the registry -j, --jobs int The maximum number of concurrent builds (default GOMAXPROCS) -L, --local Load into images to local docker daemon. --oci-layout-path string Path to save the OCI image layout of the built images --platform strings Which platform to use when pulling a multi-platform base. Format: all | <os>* -P, --preserve-import-paths Whether to preserve the full import path after KODOCKERREPO. --push Push images to KODOCKERREPO (default true) --sbom string The SBOM media type to use (none will disable SBOM synthesis and upload, also supports: spdx, cyclonedx, go.version-m). (default "spdx") --sbom-dir string Path to file where the SBOM will be written. --tag-only Include tags but not digests in resolved image references. Useful when digests are not preserved when images are repopulated. -t, --tags strings Which tags to use for the produced image instead of the default 'latest' tag (may not work properly with --base-import-paths or --bare). (default [latest]) --tarball string File to save images tarballs ``` ``` -v, --verbose Enable debug logs ``` - Rapidly iterate with Go, Containers, and Kubernetes.
Project: Apache Spark (App Definition and Development / Streaming & Messaging)
File: sql-ref-syntax-ddl-truncate-table.md

layout: global title: TRUNCATE TABLE displayTitle: TRUNCATE TABLE license: | Licensed to the Apache Software Foundation (ASF) under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to You under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. The `TRUNCATE TABLE` statement removes all the rows from a table or partition(s). The table must not be a view or an external/temporary table. In order to truncate multiple partitions at once, the user can specify the partitions in `partitionspec`. If no `partitionspec` is specified it will remove all partitions in the table. If the table is cached, the command clears cached data of the table and all its dependents that refer to it. The cache will be lazily filled when the next time the table or the dependents are accessed. ```sql TRUNCATE TABLE tableidentifier [ partitionspec ] ``` table_identifier* Specifies a table name, which may be optionally qualified with a database name. Syntax: `[ databasename. ] tablename` partition_spec* An optional parameter that specifies a comma separated list of key and value pairs for partitions. Syntax: `PARTITION ( partitioncolname = partitioncolval [ , ... ] )` ```sql -- Create table Student with partition CREATE TABLE Student (name STRING, rollno INT) PARTITIONED BY (age INT); SELECT * FROM Student; +-+++ |name|rollno|age| +-+++ | ABC| 1| 10| | DEF| 2| 10| | XYZ| 3| 12| +-+++ -- Removes all rows from the table in the partition specified TRUNCATE TABLE Student partition(age=10); -- After truncate execution, records belonging to partition age=10 are removed SELECT * FROM Student; +-+++ |name|rollno|age| +-+++ | XYZ| 3| 12| +-+++ -- Removes all rows from the table from all partitions TRUNCATE TABLE Student; SELECT * FROM Student; +-+++ |name|rollno|age| +-+++ +-+++ ```
Project: KICS (Provisioning / Security & Compliance)
File: e1e7b278-2a8b-49bd-a26e-66a7f70b17eb.md

title: SQS With SSE Disabled hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: e1e7b278-2a8b-49bd-a26e-66a7f70b17eb Query name: SQS With SSE Disabled Platform: Ansible Severity: <span style="color:#ff7213">Medium</span> Category: Encryption URL: Amazon Simple Queue Service (SQS) queue should protect the contents of their messages using Server-Side Encryption (SSE)<br> ```yaml title="Positive test num. 1 - yaml file" hl_lines="16 2 29 22" name: Create SQS queue with redrive policy community.aws.sqs_queue: name: my-queue region: ap-southeast-2 defaultvisibilitytimeout: 120 messageretentionperiod: 86400 maximummessagesize: 1024 delivery_delay: 30 receivemessagewait_time: 20 policy: "{{ json_dict }}" redrive_policy: maxReceiveCount: 5 deadLetterTargetArn: arn:aws:sqs:eu-west-1:123456789012:my-dead-queue name: Drop redrive policy community.aws.sqs_queue: name: my-queue region: ap-southeast-2 redrive_policy: {} name: Create FIFO queue community.aws.sqs_queue: name: fifo-queue region: ap-southeast-2 queue_type: fifo contentbaseddeduplication: yes name: Tag queue community.aws.sqs_queue: name: fifo-queue region: ap-southeast-2 tags: example: SomeValue ``` ```yaml title="Negative test num. 1 - yaml file" name: Configure Encryption, automatically uses a new data key every hour community.aws.sqs_queue: name: fifo-queue region: ap-southeast-2 kmsmasterkey_id: alias/MyQueueKey kmsdatakeyreuseperiod_seconds: 3600 name: Delete SQS queue community.aws.sqs_queue: name: my-queue region: ap-southeast-2 state: absent ```
Project: ArangoDB (App Definition and Development / Database)
File: on_outcome_move_construction2.md

+++ title = "`static void onoutcomemove_construction(T *, U &&, V &&) noexcept`" description = "(>= Outcome v2.2.0) Hook invoked by the converting move constructors of `basic_outcome`." categories = ["observer-policies"] weight = 450 +++ One of the constructor hooks for {{% api "basicoutcome<T, EC, EP, NoValuePolicy>" %}}, generally invoked by the converting move constructors of `basicoutcome` (NOT the standard move constructor) which consume two arguments. See each constructor's documentation to see which specific hook it invokes. Requires: Always available. Guarantees: Never throws an exception.
Project: Infinispan (App Definition and Development / Database)
File: TESTME.md

By default the tests will run against H2 and SQLITE with the command `mvn clean test` You can override the databases using comma separated list of databases with JDBC connections parameters, for example: `mvn clean test -Dorg.infinispan.test.sqlstore.database=mysql -Dorg.infinispan.test.sqlstore.jdbc.url=jdbc:mysql://host.mysqlserver:3306/dbname -Dorg.infinispan.test.sqlstore.jdbc.username=username -Dorg.infinispan.test.sqlstore.jdbc.password=password` `mvn clean test -Dorg.infinispan.test.sqlstore.database=mysql,postgres -Dorg.infinispan.test.sqlstore.jdbc.url=jdbc:mysql://host.mysqlserver:3306/dbname,jdbc:postgresql://postgresserver:5432/dbname -Dorg.infinispan.test.sqlstore.jdbc.username=username-mysql,username-postgres -Dorg.infinispan.test.sqlstore.jdbc.password=password-mysql,password-postgres`