cwielenb/CNCF-Dataset huggingface dataset:
Project: KICS (Provisioning / Security & Compliance)
File: 89827c57-5a8a-49eb-9731-976a606d70db.md

title: Workspace Without Encryption hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 89827c57-5a8a-49eb-9731-976a606d70db Query name: Workspace Without Encryption Platform: CloudFormation Severity: <span style="color:#bb2124">High</span> Category: Encryption URL: Workspaces should have encryption enabled<br> ```yaml title="Positive test num. 1 - yaml file" hl_lines="4" Resources: MyWorkSpace: Type: AWS::WorkSpaces::Workspace Properties: BundleId: !FindInMap WSTypeMap !Ref 'WorkstationType' BundleId DirectoryId: !FindInMap WSTypeMap !Ref 'WorkstationType' DirectoryId UserName: !Ref 'UserName' ``` ```yaml title="Positive test num. 2 - yaml file" hl_lines="14" Resources: MyWorkSpace2: Type: AWS::WorkSpaces::Workspace Properties: BundleId: !FindInMap WSTypeMap !Ref 'WorkstationType' BundleId DirectoryId: !FindInMap WSTypeMap !Ref 'WorkstationType' DirectoryId UserName: !Ref 'UserName' UserVolumeEncryptionEnabled: false ``` ```json title="Positive test num. 3 - json file" hl_lines="5" { "Resources": { "MyWorkSpace": { "Type": "AWS::WorkSpaces::Workspace", "Properties": { "BundleId": [ "WSTypeMap", "WorkstationType", "BundleId" ], "DirectoryId": [ "WSTypeMap", "WorkstationType", "DirectoryId" ], "UserName": "UserName" } } } } ``` <details><summary>Positive test num. 4 - json file</summary> ```json hl_lines="17" { "Resources": { "MyWorkSpace2": { "Type": "AWS::WorkSpaces::Workspace", "Properties": { "BundleId": [ "WSTypeMap", "WorkstationType", "BundleId" ], "DirectoryId": [ "WSTypeMap", "WorkstationType", "DirectoryId" ], "UserName": "UserName", "UserVolumeEncryptionEnabled": false } } } } ``` </details> ```yaml title="Negative test num. 1 - yaml file" Resources: MyWorkSpace: Type: AWS::WorkSpaces::Workspace Properties: BundleId: !FindInMap WSTypeMap !Ref 'WorkstationType' BundleId DirectoryId: !FindInMap WSTypeMap !Ref 'WorkstationType' DirectoryId UserName: !Ref 'UserName' UserVolumeEncryptionEnabled: true ``` ```yaml title="Negative test num. 2 - yaml file" Resources: MyWorkSpace2: Type: AWS::WorkSpaces::Workspace Properties: BundleId: !FindInMap WSTypeMap !Ref 'WorkstationType' BundleId DirectoryId: !FindInMap WSTypeMap !Ref 'WorkstationType' DirectoryId UserName: !Ref 'UserName' UserVolumeEncryptionEnabled: 'true' ``` ```json title="Negative test num. 3 - json file" { "Resources": { "MyWorkSpace": { "Type": "AWS::WorkSpaces::Workspace", "Properties": { "BundleId": [ "WSTypeMap", "WorkstationType", "BundleId" ], "DirectoryId": [ "WSTypeMap", "WorkstationType", "DirectoryId" ], "UserName": "UserName", "UserVolumeEncryptionEnabled": true } } } } ``` <details><summary>Negative test num. 4 - json file</summary> ```json { "Resources": { "MyWorkSpace2": { "Type": "AWS::WorkSpaces::Workspace", "Properties": { "BundleId": [ "WSTypeMap", "WorkstationType", "BundleId" ], "DirectoryId": [ "WSTypeMap", "WorkstationType", "DirectoryId" ], "UserName": "UserName", "UserVolumeEncryptionEnabled": "true" } } } } ``` </details>
Project: KICS (Provisioning / Security & Compliance)
File: kics_auto_remediation.md

With this new feature, KICS provides auto remediation for simple replacements and simple additions in a single line. Note that this feature will be only available for Terraform, for now. <p align="center"> <img width="950" alt="image" src="https://user-images.githubusercontent.com/74001161/177953750-3d279868-8cdb-44c9-86f2-379b05bb85d4.png"> </p> As a first step, you will need to scan your project/file and generate a JSON report. Example: ```docker run -v /home/cosmicgirl/:/path/ kics scan -p /path/sample.tf -i "41a38329-d81b-4be4-aef4-55b2615d3282,a9dfec39-a740-4105-bbd6-721ba163c053,2bb13841-7575-439e-8e0a-cccd9ede2fa8" --no-progress -o /path/results --report-formats json``` If KICS makes available a remediation for a result, the result will have the fields `remediation` and `remediation_type` defined. As an example, please see: <p align="center"> <img width="700" alt="image" src="https://user-images.githubusercontent.com/74001161/177957089-7007d5c0-aea5-4f3a-8300-7008ab0e6312.png"> </p> If your JSON report has any result with remediation, you will need to run the new KICS command: remediate. If you want KICS to remediate all the reported issues, you can run ```docker run -v /home/cosmicgirl/:/path/ kics remediate --results /path/results/results.json -v```. If you want to specify which remediation KICS should fix, you can use the flag `--include-ids`. In this flag, you should point the `similarity_id` of the result. For example: ```docker run -v /home/cosmicgirl/:/path/ kics remediate --results /path/results/results.json --include-ids "f282fa13cf5e4ffd4bbb0ee2059f8d0240edcd2ca54b3bb71633145d961de5ce" -v```
Project: Apache Heron (App Definition and Development / Streaming & Messaging)
File: 2022-10-22-0.20.5-incubating-release.md

title: 0.20.5-incubating Release author: Josh Fischer authorURL: https://www.linkedin.com/in/joshfischer1108/ <!-- Licensed to the Apache Software Foundation (ASF) under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. --> The Heron community is pleased to announce the release of version 0.20.5-incubating! We are excited as this is moment in time when we start to work on graduating out of the incubator. Heron has had several cloud native specific improvements and we the community has lasted across several years. Thank you to all who have contributed to this and all prior releases. We have distributed a full set of convenience binaries along with enhanced support to run Heron more easily in Kubernetes. Here are a few updates since the last release: To download Apache Heron 0.20.5-incubating, click To view the official Heron Docker Image repository click Maven artifacts can be found For more information about Apache Heron 0.20.5-incubating, see and
Project: ClickHouse (App Definition and Development / Database)
File: v22.8.11.15-lts.md

sidebar_position: 1 sidebar_label: 2022 Backported in : Updated normaliser to clone the alias ast. resolves Implementation: Updated QueryNormalizer to clone alias ast, when its replaced. Previously just assigning the same leads to exception in LogicalExpressinsOptimizer as it would be the same parent being inserted again. * This bug is not seen with new analyser (allowexperimentalanalyzer), so no changes for it. I added a test for the same. (). Backported in : An issue with the following exception has been reported while trying to read a Parquet file from S3 into ClickHouse:. (). Backported in : Fix sumMap() for Nullable(Decimal()). (). Backported in : Fixed `ALTER ... RESET SETTING` with `ON CLUSTER`. It could be applied to one replica only. Fixes . (). Use only PRs to our repository in pr_info on push (). Fix tags workflow ().
Project: Dapr (App Definition and Development / Application Definition & Image Build)
File: v1.9.2.md

Users who disabled tracing and are subscribing to Dapr pubsub components via gRPC or using input bindings via gRPC will encounter panics when an event is attempted to be delivered. This issue impacts users who: Disabled tracing by setting samplingRate to "0" in Dapr's configuration (by default, the value is "1") Use input bindings via gRPC and/or subscribe to pubsub components via gRPC Dapr 1.9.0 added support for tracing with OpenTelemetry, which uses a new SDK version. During the upgrade, an error was introduced causing a panic when tracing was disabled, due to a missing "nil-check". We have added the missing `nil` checks to correctly handle the case where tracing is disabled.
Project: Keycloak (Provisioning / Security & Compliance)
File: cnfc.md

Keycloak is currently a CNCF incubating project. This document provides useful information and links around CNFC. (current channels , , and ) Maintainers should be listed in the following places: For new maintainers send email address of maintainer to cncf-maintainer-changes(at)cncf.io for access to maintainers mailing list and service desk. Maintainers should be subscribed to the following communication channels: cncf-keycloak-maintainers(at)lists.cncf.io keycloak-maintainers(at)googlegroups.com #keycloak-maintainers channel in
Project: secureCodeBox (Provisioning / Security & Compliance)
File: bug_report.md

name: " Bug report" about: Please create a bug report if you encouter any project specific issue. labels: bug <!-- Thank you for reporting an issue in our project Before opening a new issue, please make sure that we do not have any duplicates already open. You can ensure this by searching the issue list for this repository. If there is a duplicate, please close your issue and add a comment to the existing issue instead. --> <!-- A clear and concise description of what the bug is. --> <!-- Steps to reproduce the behavior: Go to '...' Click on '....' Scroll down to '....' See error --> <!-- A clear and concise description of what you expected to happen. --> <!-- secureCodeBox Version/Release OS: [e.g. iOS] Kubernetes Version [command: `kubectl version`] Docker Version [command: `docker -v`] Browser [e.g. chrome, safari, firefox,...] --> <!-- If applicable, add screenshots to help explain your problem. --> <!-- Add any other context about the problem here. -->
Project: StarRocks (App Definition and Development / Database)
File: timestamp.md

displayed_sidebar: "English" Returns the DATETIME value of a date or datetime expression. ```Haskell DATETIME timestamp(DATETIME|DATE expr); ``` `expr`: the time expression you want to convert. It must be of the DATETIME or DATE type. Returns a DATETIME value. If the input time is empty or does not exist, such as `2021-02-29`, NULL is returned. ```Plain Text select timestamp("2019-05-27"); +-+ | timestamp('2019-05-27') | +-+ | 2019-05-27 00:00:00 | +-+ 1 row in set (0.00 sec) ```
Project: YugabyteDB (App Definition and Development / Database)
File: 03-self-join.md

title: "SELF JOIN" In this exercise we will query the orders table using a self JOIN. ``` SELECT a.employeeid AS employeeid_1, b.employeeid AS employeeid_2, a.customer_id FROM orders a, orders b WHERE a.employeeid &lt;&gt; b.employeeid AND a.customerid=b.customerid ORDER BY a.employee_id; ``` The query should return 8,704 rows.
Project: YugabyteDB (App Definition and Development / Database)
File: symptoms-vs-mask-wearing-by-state.md

title: Select the data for COVID-like symptoms vs mask-wearing by state scatter plot for 21-Oct-2020 linkTitle: Data for scatter-plot for 21-Oct-2020 headerTitle: Select the data for COVID-like symptoms vs mask-wearing by state scatter plot for 21-Oct-2020 description: Select the data for COVID-like symptoms vs mask-wearing by state scatter plot for 21-Oct-2020 menu: v2.18: identifier: symptoms-vs-mask-wearing-by-state parent: analyze-the-covidcast-data weight: 20 type: docs This query: ```plpgsql select round(maskwearingpct) as "% wearing mask", round(symptoms_pct) as "% with symptoms", state from covidcastfbsurveyresultsv where surveydate = todate('2020-10-21', 'yyyy-mm-dd') order by 1; ``` selects out the data for 21-Oct-2020 so that they can be used to draw a scatter-plot. This is the result: ``` % wearing mask | % with symptoms | state -+--+- 66 | 34 | wy 71 | 49 | sd 73 | 46 | nd 75 | 37 | id 79 | 32 | ok 80 | 31 | tn 80 | 33 | ia 80 | 29 | ms 81 | 33 | mo 81 | 41 | mt 81 | 31 | ks 81 | 24 | la 82 | 36 | ne 82 | 28 | al 82 | 23 | ga 83 | 29 | ak 84 | 23 | sc 85 | 33 | ut 85 | 19 | fl 86 | 31 | in 86 | 30 | wv 86 | 31 | ar 86 | 23 | oh 87 | 25 | tx 87 | 17 | az 87 | 29 | ky 88 | 36 | wi 88 | 20 | nc 88 | 17 | pa 88 | 21 | co 88 | 22 | mi 89 | 13 | me 89 | 13 | nh 89 | 26 | mn 89 | 24 | il 89 | 20 | nv 90 | 21 | nm 90 | 16 | or 90 | 19 | va 91 | 13 | ca 92 | 16 | ri 92 | 11 | vt 92 | 16 | wa 92 | 13 | nj 93 | 15 | ct 93 | 13 | ny 93 | 15 | de 94 | 16 | md 94 | 12 | hi 95 | 12 | ma 96 | 12 | dc ``` The overall trend is clear: as mask-wearing percent increases, the incidence of COVID-like symptoms decreases. You can re-run the query for several different arbitrarily selected dates. Or you can calculate the averages per state over the whole observation period like this: ```plpgsql select round(avg(maskwearingpct)) as "% wearing mask", round(avg(symptoms_pct)) as "% with symptoms", state from covidcastfbsurveyresultsv group by state order by 1; ``` The overall trend is always the same.
Project: ClickHouse (App Definition and Development / Database)
File: v21.2.6.1-stable.md

sidebar_position: 1 sidebar_label: 2022 Backported in : Fix the number of threads for scalar subqueries and subqueries for index (after single thread was always used). Fixes , . (). Backported in : fix default_replica_path and default_replica_name values are useless on Replicated()MergeTree engine when the engine needs specify other parameters. (). Backported in : fix bug related to cast tuple to map. Closes . (). Backported in : Now mutations allowed only for table engines that support them (MergeTree family, Memory, MaterializedView). Other engines will report a more clear error. Fixes . (). Backported in : Fix crash in `EXPLAIN` for query with `UNION`. Fixes , . (). Backported in : Fix redundant reconnects to ZooKeeper and the possibility of two active sessions for a single clickhouse server. Both problems introduced in . (). Backported in : Now `ALTER MODIFY COLUMN` queries will correctly affect changes in partition key, skip indices, TTLs, and so on. Fixes . (). Backported in : Fix error `Bad cast from type ... to DB::ColumnLowCardinality` while inserting into table with `LowCardinality` column from `Values` format. Fixes . ().
Project: DevSpace (App Definition and Development / Application Definition & Image Build)
File: devspace_reset_pods.md

title: "Command - devspace reset pods" sidebar_label: devspace reset pods Resets the replaced pods ``` devspace reset pods [flags] ``` ``` Resets the replaced pods to its original state Examples: devspace reset pods ``` ``` -h, --help help for pods ``` ``` --config string The devspace config file to use --debug Prints the stack trace if an error occurs --disable-profile-activation If true will ignore all profile activations --inactivity-timeout int Minutes the current user is inactive (no mouse or keyboard interaction) until DevSpace will exit automatically. 0 to disable. Only supported on windows and mac operating systems (default 180) --kube-context string The kubernetes context to use -n, --namespace string The kubernetes namespace to use --no-warn If true does not show any warning when deploying into a different namespace or kube-context than before -p, --profile strings The DevSpace profiles to apply. Multiple profiles are applied in the order they are specified --profile-parent strings One or more profiles that should be applied before the specified profile (e.g. devspace dev --profile-parent=base1 --profile-parent=base2 --profile=my-profile) --profile-refresh If true will pull and re-download profile parent sources --restore-vars If true will restore the variables from kubernetes before loading the config --save-vars If true will save the variables to kubernetes after loading the config --silent Run in silent mode and prevents any devspace log output except panics & fatals -s, --switch-context DEPRECATED: Switches and uses the last kube context and namespace that was used to deploy the DevSpace project --var strings Variables to override during execution (e.g. --var=MYVAR=MYVALUE) --vars-secret string The secret to restore/save the variables from/to, if --restore-vars or --save-vars is enabled (default "devspace-vars") ```
Project: KubeBlocks by ApeCloud (App Definition and Development / Database)
File: kbcli_addon_list.md

title: kbcli addon list List addons. ``` kbcli addon list [flags] ``` ``` -h, --help help for list -o, --output format prints the output in the specified format. Allowed values: table, json, yaml, wide (default table) -l, --selector string Selector (label query) to filter on, supports '=', '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must satisfy all of the specified label constraints. --show-labels When printing, show all labels as the last column (default hide labels column) ``` ``` --as string Username to impersonate for the operation. User could be a regular user or a service account in a namespace. --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups. --as-uid string UID to impersonate for the operation. --cache-dir string Default cache directory (default "$HOME/.kube/cache") --certificate-authority string Path to a cert file for the certificate authority --client-certificate string Path to a client certificate file for TLS --client-key string Path to a client key file for TLS --cluster string The name of the kubeconfig cluster to use --context string The name of the kubeconfig context to use --disable-compression If true, opt-out of response compression for all requests to the server --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure --kubeconfig string Path to the kubeconfig file to use for CLI requests. --match-server-version Require server version to match client version -n, --namespace string If present, the namespace scope for this CLI request --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0") -s, --server string The address and port of the Kubernetes API server --tls-server-name string Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used --token string Bearer token for authentication to the API server --user string The name of the kubeconfig user to use ``` - Addon command.
Project: Grafeas (Provisioning / Security & Compliance)
File: CONTRIBUTING.md

We'd love to accept your patches and contributions to this project. There are just a few small guidelines you need to follow. If you're looking to start contributing, see the section below. Contributions to this project must be accompanied by a Contributor License Agreement. You (or your employer) retain the copyright to your contribution, this simply gives us permission to use and redistribute your contributions as part of the project. Head over to <https://cla.developers.google.com/> to see your current agreements on file or to sign a new one. You generally only need to submit a CLA once, so if you've already submitted one (even if it was for a different project), you probably don't need to do it again. If you would like to make a large change, please start with a proposal issue that includes: What you would like to achieve Why you'd like to make this change A design overview A member of the Grafeas core team may reach out to you to schedule a meeting to discuss the PR, before a formal review takes place. This meeting will be announced on as well, once the date and time have been set. If you're enthusiastic about contributing to Grafeas and are looking for ideas, please check out the issues marked with [`good first issue`](https://github.com/grafeas/grafeas/labels/good%20first%20issue). Make sure you join the group to stay up-to-date on the developer community news! All submissions, including submissions by project members, require review. We use GitHub pull requests for this purpose. Consult for more information on using pull requests. This project follows [Google's Open Source Community Guidelines](https://opensource.google.com/conduct/).
Project: ko (App Definition and Development / Application Definition & Image Build)
File: limitations.md

`ko` works best when your application has no dependencies on the underlying image. This means `ko` is ideal when you don't require , and builds are executed with `CGO_ENABLED=0` by default. To install other OS packages, make those available in your . `ko` only supports Go applications. For a similar tool targeting Java applications, try . For other languages, try and .
Project: YDB (App Definition and Development / Database)
File: debug-jaeger.md

{% include %} Below are examples of the code enabling Jaeger tracing in different {{ ydb-short-name }} SDKs. {% list tabs %} Go (native) ```go package main import ( "context" "time" "github.com/opentracing/opentracing-go" jaegerConfig "github.com/uber/jaeger-client-go/config" "github.com/ydb-platform/ydb-go-sdk/v3" "github.com/ydb-platform/ydb-go-sdk/v3/trace" tracing "github.com/ydb-platform/ydb-go-sdk-opentracing" ) const ( tracerURL = "localhost:5775" serviceName = "ydb-go-sdk" ) func main() { tracer, closer, err := jaegerConfig.Configuration{ ServiceName: serviceName, Sampler: &jaegerConfig.SamplerConfig{ Type: "const", Param: 1, }, Reporter: &jaegerConfig.ReporterConfig{ LogSpans: true, BufferFlushInterval: 1 * time.Second, LocalAgentHostPort: tracerURL, }, }.NewTracer() if err != nil { panic(err) } defer closer.Close() // set global tracer of this application opentracing.SetGlobalTracer(tracer) span, ctx := opentracing.StartSpanFromContext(context.Background(), "client") defer span.Finish() db, err := ydb.Open(ctx, os.Getenv("YDBCONNECTIONSTRING"), tracing.WithTraces(tracing.WithDetails(trace.DetailsAll)), ) if err != nil { panic(err) } defer db.Close(ctx) ... } ``` Go (database/sql) ```go package main import ( "context" "database/sql" "time" "github.com/opentracing/opentracing-go" jaegerConfig "github.com/uber/jaeger-client-go/config" "github.com/ydb-platform/ydb-go-sdk/v3" "github.com/ydb-platform/ydb-go-sdk/v3/trace" tracing "github.com/ydb-platform/ydb-go-sdk-opentracing" ) const ( tracerURL = "localhost:5775" serviceName = "ydb-go-sdk" ) func main() { tracer, closer, err := jaegerConfig.Configuration{ ServiceName: serviceName, Sampler: &jaegerConfig.SamplerConfig{ Type: "const", Param: 1, }, Reporter: &jaegerConfig.ReporterConfig{ LogSpans: true, BufferFlushInterval: 1 * time.Second, LocalAgentHostPort: tracerURL, }, }.NewTracer() if err != nil { panic(err) } defer closer.Close() // set global tracer of this application opentracing.SetGlobalTracer(tracer) span, ctx := opentracing.StartSpanFromContext(context.Background(), "client") defer span.Finish() nativeDriver, err := ydb.Open(ctx, os.Getenv("YDBCONNECTIONSTRING"), tracing.WithTraces(tracing.WithDetails(trace.DetailsAll)), ) if err != nil { panic(err) } defer nativeDriver.Close(ctx) connector, err := ydb.Connector(nativeDriver) if err != nil { panic(err) } db := sql.OpnDB(connector) defer db.Close() ... } ``` {% endlist %}