cwielenb/CNCF-Dataset huggingface dataset:
Project: ShardingSphere (App Definition and Development / Database)
File: show-sharding-table-rules-used-auditor.en.md

+++ title = "SHOW SHARDING TABLE RULES USED AUDITOR" weight = 12 +++ `SHOW SHARDING TABLE RULES USED ALGORITHM` syntax is used to query sharding rules used specified sharding auditor in specified logical database {{< tabs >}} {{% tab name="Grammar" %}} ```sql ShowShardingTableRulesUsedAuditor::= 'SHOW' 'SHARDING' 'TABLE' 'RULES' 'USED' 'AUDITOR' AuditortorName ('FROM' databaseName)? AuditortorName ::= identifier databaseName ::= identifier ``` {{% /tab %}} {{% tab name="Railroad diagram" %}} <iframe frameborder="0" name="diagram" id="diagram" width="100%" height="100%"></iframe> {{% /tab %}} {{< /tabs >}} When databaseName is not specified, the default is the currently used DATABASE. If DATABASE is not used, No database selected will be prompted. | Columns | Descriptions | ||--| | type | Sharding rule type | | name | Sharding rule name | Query sharding table rules for the specified sharding auditor in spicified logical database ```sql SHOW SHARDING TABLE RULES USED AUDITOR shardingkeyrequiredauditor FROM shardingdb; ``` ```sql mysql> SHOW SHARDING TABLE RULES USED AUDITOR shardingkeyrequiredauditor FROM shardingdb; +-++ | type | name | +-++ | table | t_order | +-++ 1 row in set (0.00 sec) ``` Query sharding table rules for specified sharding auditor in the current logical database ```sql SHOW SHARDING TABLE RULES USED AUDITOR shardingkeyrequired_auditor; ``` ```sql mysql> SHOW SHARDING TABLE RULES USED AUDITOR shardingkeyrequired_auditor; +-++ | type | name | +-++ | table | t_order | +-++ 1 row in set (0.00 sec) ``` `SHOW`, `SHARDING`, `TABLE`, `RULES`, `USED`, `AUDITOR`, `FROM`
Project: StarRocks (App Definition and Development / Database)
File: SHOW_PLUGINS.md

displayed_sidebar: "English" This statement is used to view the installed plugins. :::tip This operation requires the SYSTEM-level PLUGIN privilege. You can follow the instructions in to grant this privilege. ::: ```sql SHOW PLUGINS ``` This command will display all built-in plugins and custom plugins. Show the installed plugins: ```sql SHOW PLUGINS; ```
Project: Trivy (Provisioning / Security & Compliance)
File: centos.md

Trivy supports the following scanners for OS packages. | Scanner | Supported | | :--: | :-: | | SBOM | | | Vulnerability | | | License | | Please see for supported versions. The table below outlines the features offered by Trivy. | Feature | Supported | | :--: | :-: | | Unfixed vulnerabilities | | | | | Same as . CentOS does not provide straightforward machine-readable security advisories. As a result, Trivy utilizes the security advisories from for detecting vulnerabilities in CentOS. This approach might lead to situations where, even though Trivy displays a fixed version, CentOS might not have the patch available yet. Since patches released for RHEL often become available in CentOS after some time, it's usually just a matter of waiting. !!! note The case for CentOS Stream, which is not supported by Trivy, is entirely different from CentOS. As Trivy relies on Red Hat's advisories, please refer to for details regarding vulnerability severity and status. Same as .
Project: Meshery (Provisioning / Automation & Configuration)
File: v0.6.75.md

layout: release date: 2023-04-07 tag: v0.6.75 [ ] Updated Dockerfile to remove OAM. From this release, Meshery will no longer support OAM components. Thank you to our contributors for making this release possible: @Abhishek-kumar09 and @Revolyssup
Project: Carvel (App Definition and Development / Application Definition & Image Build)
File: feature-enhancement-request.md

name: Feature request about: Suggest an idea for ytt title: '' labels: carvel triage, enhancement assignees: '' Describe the problem/challenge you have [A description of the current challenge that you are experiencing.] Describe the solution you'd like [A clear and concise description of what you want to happen. If applicable a visual representation of the UX (ex: new CLI argument name, or resulting yaml).] Anything else you would like to add: [Additional information that will assist in solving the issue.] Vote on this request This is an invitation to the community to vote on issues, to help us prioritize our backlog. Use the "smiley face" up to the right of this comment to vote. "I would like to see this addressed as soon as possible" "There are other more important things to focus on right now" We are also happy to receive and review Pull Requests if you want to help working on this issue.
Project: Apache Hadoop (App Definition and Development / Database)
File: CHANGELOG.0.16.3.md

<! --> | JIRA | Summary | Priority | Component | Reporter | Contributor | |:- |:- | : |:- |:- |:- | | | ConcurrentModificationException from org.apache.hadoop.ipc.Server$Responder in JobTracker | Major | ipc | Amar Kamat | Raghu Angadi | | | FileSystem cache keep overwriting cached value | Blocker | . | Tsz Wo Nicholas Sze | Tsz Wo Nicholas Sze | | | Job successful but dropping records (when disk full) | Blocker | . | Koji Noguchi | Devaraj Das | | | DistributedFileSystem.close() deadlock and FileSystem.closeAll() warning | Blocker | . | Tsz Wo Nicholas Sze | Tsz Wo Nicholas Sze | | | TestFileSystem fails randomly | Minor | test | Tsz Wo Nicholas Sze | Tsz Wo Nicholas Sze | | | A failure on SecondaryNameNode truncates the primary NameNode image. | Blocker | . | Konstantin Shvachko | Konstantin Shvachko | | | JobClient creates submitJobDir with SYSTEM\DIR\PERMISSION ( rwx-wx-wx) | Blocker | . | Lohit Vijayarenu | Tsz Wo Nicholas Sze |
Project: Trivy (Provisioning / Security & Compliance)
File: combine.md

Trivy usually scans each configuration file individually. Sometimes it might be useful to compare values from different configuration files simultaneously. When `combine` is set to true, all config files under the specified directory are combined into one input data structure. !!! example ``` rego_input := { "combine": false, } ``` In "combine" mode, the `input` document becomes an array, where each element is an object with two fields: `"path": "path/to/file"`: the relative file path of the respective file `"contents": ...`: the parsed content of the respective file Now you can ensure that duplicate values match across the entirety of your configuration files. In "combine" mode, the `deny` entrypoint must return an object with two keys `filepath` (required) : the relative file path of the file being evaluated `msg` (required) : the message describing an issue !!! example ``` deny[res] { resource := input[i].contents ... some logic ... res := { "filepath": input[i].path, "msg": "something bad", } } ```
Project: ShardingSphere (App Definition and Development / Database)
File: create-broadcast-table-rule.en.md

+++ title = "CREATE BROADCAST TABLE RULE" weight = 1 +++ The `CREATE BROADCAST TABLE RULE` syntax is used to create broadcast table rules for tables that need to be broadcast (broadcast tables) {{< tabs >}} {{% tab name="Grammar" %}} ```sql CreateBroadcastTableRule ::= 'CREATE' 'BROADCAST' 'TABLE' 'RULE' ifNotExists? tableName (',' tableName)* ifNotExists ::= 'IF' 'NOT' 'EXISTS' tableName ::= identifier ``` {{% /tab %}} {{% tab name="Railroad diagram" %}} <iframe frameborder="0" name="diagram" id="diagram" width="100%" height="100%"></iframe> {{% /tab %}} {{< /tabs >}} `tableName` can use an existing table or a table that will be created; `ifNotExists` clause is used for avoid `Duplicate Broadcast rule` error. ```sql -- Add tprovince, tcity to broadcast table rules CREATE BROADCAST TABLE RULE tprovince, tcity; ``` ```sql CREATE BROADCAST TABLE RULE IF NOT EXISTS tprovince, tcity; ``` `CREATE`, `BROADCAST`, `TABLE`, `RULE`
Project: KICS (Provisioning / Security & Compliance)
File: f27791a5-e2ae-4905-8910-6f995c576d09.md

title: API Gateway Without SSL Certificate hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: f27791a5-e2ae-4905-8910-6f995c576d09 Query name: API Gateway Without SSL Certificate Platform: Pulumi Severity: <span style="color:#ff7213">Medium</span> Category: Insecure Configurations URL: SSL Client Certificate should be defined<br> ```yaml title="Positive test num. 1 - yaml file" hl_lines="7" name: aws-eks runtime: yaml description: An EKS cluster resources: example: type: aws:apigatewayv2:Stage properties: apiId: ${awsapigatewayv2api.example.id} ``` ```yaml title="Negative test num. 1 - yaml file" name: aws-eks runtime: yaml description: An EKS cluster resources: example: type: aws:apigatewayv2:Stage properties: apiId: ${awsapigatewayv2api.example.id} clientCertificateId: 12131323a ```
Project: Apache StreamPipes (App Definition and Development / Streaming & Messaging)
File: CONTRIBUTING.md

<!-- ~ Licensed to the Apache Software Foundation (ASF) under one or more ~ contributor license agreements. See the NOTICE file distributed with ~ this work for additional information regarding copyright ownership. ~ The ASF licenses this file to You under the Apache License, Version 2.0 ~ (the "License"); you may not use this file except in compliance with ~ the License. You may obtain a copy of the License at ~ ~ http://www.apache.org/licenses/LICENSE-2.0 ~ ~ Unless required by applicable law or agreed to in writing, software ~ distributed under the License is distributed on an "AS IS" BASIS, ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. ~ See the License for the specific language governing permissions and ~ limitations under the License. ~ --> Before opening a pull request, review the page. It lists information that is required for contributing to StreamPipes. When you contribute code, you affirm that the contribution is your original work and that you license the work to the project under the project's open source license. Whether or not you state this explicitly, by submitting any copyrighted material via pull request, email, or other means you agree to license the material under the project's open source license and warrant that you have the legal authority to do so.
Project: Fluvio (App Definition and Development / Streaming & Messaging)
File: snippet.md

Tips: For pretty display on a Mac, install jsonpp ```brew install jsonpp``` Display all infinyon objects kubectl get --raw /apis/fluvio.infinyon.com/v1 | jsonpp Display topic ```test``` kubectl get --raw /apis/fluvio.infinyon.com/v1/namespaces/default/topics/test | jsonpp
Project: ShardingSphere (App Definition and Development / Database)
File: show-unused-sharding-algorithms.en.md

+++ title = "SHOW UNUSED SHARDING ALGORITHMS" weight = 3 +++ The `SHOW UNUSED SHARDING ALGORITHMS` syntax is used to query the unused sharding algorithms in the specified database. {{< tabs >}} {{% tab name="Grammar" %}} ```sql ShowShardingAlgorithms::= 'SHOW' 'UNUSED' 'SHARDING' 'ALGORITHMS' ('FROM' databaseName)? databaseName ::= identifier ``` {{% /tab %}} {{% tab name="Railroad diagram" %}} <iframe frameborder="0" name="diagram" id="diagram" width="100%" height="100%"></iframe> {{% /tab %}} {{< /tabs >}} When `databaseName` is not specified, the default is the currently used `DATABASE`. If `DATABASE` is not used, `No database selected` will be prompted. | Column | Description | |--|-| | name | Sharding algorithm name | | type | Sharding algorithm type | | props | Sharding algorithm properties | Query the unused sharding table algorithms of the specified logical database ```sql SHOW UNUSED SHARDING ALGORITHMS; ``` ```sql mysql> SHOW UNUSED SHARDING ALGORITHMS; ++--+--+ | name | type | props | ++--+--+ | t1inline | INLINE | algorithm-expression=torder${orderid % 2} | ++--+--+ 1 row in set (0.01 sec) ``` `SHOW`, `UNUSED`, `SHARDING`, `ALGORITHMS`, `FROM`
Project: Kui (App Definition and Development / Application Definition & Image Build)
File: kui_shell_core.CommandLine.md

/ / CommandLine .CommandLine This information represents a command line, but split out in various useful ways. | Name | Type | | :-- | :- | | `Options` | | `CommandLine` argv: `string`[] the result of a whitespace split applied to the `command` string that pays attention to backslash escaping and quotations argvNoOptions: `string`[] the residual of `argv` without `parsedOptions` command: `string` the raw command string, as given by the user parsedOptions: `Options` the dash options parsed out in a way that pays attention to n-ary options such as `--option key value` pipeStages: `Object` pipeline stages, e.g. if command='a b --foo|c', the pipeStages=[['a','b, '--foo'],'c'] | Name | Type | | : | :-- | | `prefix?` | `string` | | `redirect?` | `string` | | `redirector?` | `">"` \| `">>"` \| `"2>&1"` \| `">&"` \| `">>&"` | | `stages` | `string` |
Project: EDB (App Definition and Development / Database)
File: container_images.md

The CloudNativePG operator for Kubernetes is designed to work with any compatible container image of PostgreSQL that complies with the following requirements: PostgreSQL executables that must be in the path: `initdb` `postgres` `pg_ctl` `pg_controldata` `pg_basebackup` Barman Cloud executables that must be in the path: `barman-cloud-backup` `barman-cloud-backup-delete` `barman-cloud-backup-list` `barman-cloud-check-wal-archive` `barman-cloud-restore` `barman-cloud-wal-archive` `barman-cloud-wal-restore` PGAudit extension installed (optional - only if PGAudit is required in the deployed clusters) Appropriate locale settings !!! Important Only are allowed. No entry point and/or command is required in the image definition, as CloudNativePG overrides it with its instance manager. !!! Warning Application Container Images will be used by CloudNativePG in a Primary with multiple/optional Hot Standby Servers Architecture only. The CloudNativePG community provides and supports that work with CloudNativePG, and publishes them on . To ensure the operator makes informed decisions, it must accurately detect the PostgreSQL major version. This detection can occur in two ways: Utilizing the `major` field of the `imageCatalogRef`, if defined. Auto-detecting the major version from the image tag of the `imageName` if not explicitly specified. For auto-detection to work, the image tag must adhere to a specific format. It should commence with a valid PostgreSQL major version number (e.g., 15.6 or 16), optionally followed by a dot and the patch level. Following this, the tag can include any character combination valid and accepted in a Docker tag, preceded by a dot, an underscore, or a minus sign. Examples of accepted image tags: `12.1` `13.3.2.1-1` `13.4` `14` `15.5-10` `16.0` !!! Warning `latest` is not considered a valid tag for the image. !!! Note Image tag requirements do no apply for images defined in a catalog.
Project: Beam (App Definition and Development / Streaming & Messaging)
File: xiaohongshu.md

title: "Xiaohongshu" icon: /images/logos/powered-by/xiaohongshu.png hasLink: "https://www.xiaohongshu.com/" <!-- Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. -->
Project: Checkov (Provisioning / Security & Compliance)
File: README.md

Child directories contain parsing scenarios along with an `expected.json` file with the total expected result output. During real evaluation all files will use absolute paths. To make tests work across various systems, test expectations are written with relative paths and tests will convert to absolute paths on the fly. If evaluations are also being tested, an `eval.json` file may be created with the expected evaluation data.
Project: StarRocks (App Definition and Development / Database)
File: truncate.md

displayed_sidebar: "English" Rounds the input down to the nearest equal or smaller value with the specified number of places after the decimal point. ```Shell truncate(arg1,arg2); ``` `arg1`: the input to be rounded. It supports the following data types: DOUBLE DECIMAL128 `arg2`: the number of places to keep after the decimal point. It supports the INT data type. Returns a value of the same data type as `arg1`. ```Plain mysql> select truncate(3.14,1); +-+ | truncate(3.14, 1) | +-+ | 3.1 | +-+ 1 row in set (0.00 sec) ```
Project: KICS (Provisioning / Security & Compliance)
File: 22cd11f7-9c6c-4f6e-84c0-02058120b341.md

title: Gem Install Without Version hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 22cd11f7-9c6c-4f6e-84c0-02058120b341 Query name: Gem Install Without Version Platform: Dockerfile Severity: <span style="color:#ff7213">Medium</span> Category: Supply-Chain URL: Instead of 'gem install ' we should use 'gem install :'<br> ```dockerfile title="Positive test num. 1 - dockerfile file" hl_lines="3 4 5" FROM alpine:3.5 RUN apk add --update py2-pip RUN gem install bundler RUN ["gem", "install", "blunder"] RUN gem install grpc -v ${GRPCRUBYVERSION} blunder RUN bundle install COPY requirements.txt /usr/src/app/ RUN pip install --no-cache-dir -r /usr/src/app/requirements.txt COPY app.py /usr/src/app/ COPY templates/index.html /usr/src/app/templates/ EXPOSE 5000 CMD ["python", "/usr/src/app/app.py"] ``` ```dockerfile title="Negative test num. 1 - dockerfile file" FROM alpine:3.5 RUN apk add --update py2-pip RUN gem install bundler:2.0.2 RUN bundle install COPY requirements.txt /usr/src/app/ RUN pip install --no-cache-dir -r /usr/src/app/requirements.txt COPY app.py /usr/src/app/ COPY templates/index.html /usr/src/app/templates/ EXPOSE 5000 CMD ["python", "/usr/src/app/app.py"] ENV GRPC_VERSION 1.0.0 RUN gem install grpc -v ${GRPCRUBYVERSION} RUN gem install grpc:${GRPCVERSION} grpc-tools:${GRPCVERSION} ```
Project: Beam (App Definition and Development / Streaming & Messaging)
File: model-evaluation.md

title: "ML Model Evaluation" <!-- Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. --> Model evaluation is an essential part of your ML journey. It allows you to benchmark your models performance against an unseen dataset. You can extract chosen metrics, create visualizations, log metadata, and compare the performance of different models. In your MLOps ecosystem, a model evaluation step is crucial for monitoring the evolution of your model or multiple models when your dataset grows or changes over time and when you retrain your model. Beam provides support for running model evaluation on a TensorFlow model directly inside your pipeline by using a PTransform called . This PTransform is part of , a library for performing model evaluation across different slices of data. TFMA performs its computations in a distributed manner over large amounts of data using Beam, allowing you to evaluate models on large amounts of data in a distributed manner. These metrics are compared over slices of data and visualized in Jupyter or Colab notebooks. Here is an example of how you can use ExtractEvaluateAndWriteResults to evaluate a linear regression model. First, define the configuration to specify the model information, the chosen metrics, and optionally the data slices. ```python from google.protobuf import text_format evalconfig = textformat.Parse(""" model_specs { label_key: "output" } metrics_specs { metrics { class_name: "ExampleCount" } metrics { class_name: "MeanAbsoluteError" } metrics { class_name: "MeanSquaredError" } metrics { class_name: "MeanPrediction" } } slicing_specs {} """, tfma.EvalConfig()) ``` Then, create a pipeline to run the evaluation: ```python from tfx_bsl.public import tfxio evalsharedmodel = tfma.defaultevalshared_model( evalsavedmodelpath='modelpath', evalconfig=evalconfig) tfx_io = tfxio.TFExampleRecord( filepattern='tfrecordspath', rawrecordcolumnname=tfma.ARROWINPUT_COLUMN) with beam.Pipeline() as pipeline: _ = ( pipeline | 'ReadData' >> tfx_io.BeamSource() | 'EvalModel' >> tfma.ExtractEvaluateAndWriteResults( evalsharedmodel=evalsharedmodel, evalconfig=evalconfig, outputpath='outputpath')) ``` This pipeline saves the results, including the config file, metrics, plots, and so on, to a chosen output_path. For a full end-to-end example of model evaluation in TFMA on Beam, see the . This example shows the creation of tfrecords from an open source dataset, the training of a model, and the evaluation in Beam.
Project: TDengine (App Definition and Development / Database)
File: 02-tools.md

title: taosTools Release History and Download Links sidebar_label: taosTools description: This document provides download links for all released versions of taosTools compatible with TDengine 3.0. taosTools installation packages can be downloaded at the following links: For other historical version installers, please visit . import Release from "/components/ReleaseV3"; <Release type="tools" version="2.5.2" /> <Release type="tools" version="2.5.1" /> <Release type="tools" version="2.5.0" /> <Release type="tools" version="2.4.12" /> <Release type="tools" version="2.4.11" /> <Release type="tools" version="2.4.10" /> <Release type="tools" version="2.4.9" /> <Release type="tools" version="2.4.8" /> <Release type="tools" version="2.4.6" /> <Release type="tools" version="2.4.3" /> <Release type="tools" version="2.4.2" /> <Release type="tools" version="2.4.1" /> <Release type="tools" version="2.4.0" /> <Release type="tools" version="2.3.3" /> <Release type="tools" version="2.3.2" /> <Release type="tools" version="2.3.0" /> <Release type="tools" version="2.2.9" /> <Release type="tools" version="2.2.7" /> <Release type="tools" version="2.2.6" /> <Release type="tools" version="2.2.4" /> <Release type="tools" version="2.2.3" /> <Release type="tools" version="2.2.2" /> <Release type="tools" version="2.2.0" /> <Release type="tools" version="2.1.3" />
Project: Meshery (Provisioning / Automation & Configuration)
File: v0.6.24.md

layout: release date: 2022-11-11 tag: v0.6.24 language: en Fix nil err passed in meshkit err @Revolyssup (#6520) [CI] Release workflows: Removing redundant e2e tests for K8s components @leecalcote (#6518) Thank you to our contributors for making this release possible: @Revolyssup and @leecalcote
Project: KICS (Provisioning / Security & Compliance)
File: 8af7162d-6c98-482f-868e-0d33fb675ca8.md

title: Shared Host User Namespace hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 8af7162d-6c98-482f-868e-0d33fb675ca8 Query name: Shared Host User Namespace Platform: DockerCompose Severity: <span style="color:#ff7213">Medium</span> Category: Resource Management URL: The host's user namespace should not be shared.<br> ```yaml title="Positive test num. 1 - yaml file" hl_lines="9" version: "3" services: service1: image: service1:3.4 hostname: servicer network_mode: host pid: host userns_mode: host privileged: true ``` ```yaml title="Negative test num. 1 - yaml file" version: "3.9" services: webapp: build: context: ./ dockerfile: Dockerfile-alternate args: buildno: 1 ports: "8080:8080" "3000:3000" security_opt: apparmor:unconfined ``` ```yaml title="Negative test num. 2 - yaml file" version: "3.9" services: webapp: build: context: ./ dockerfile: Dockerfile-alternate args: buildno: 1 ports: "8080:8080" "3000:3000" security_opt: apparmor:unconfined usernsmode: anythingbut_host ```