cwielenb/CNCF-Dataset huggingface dataset:
Project: KICS (Provisioning / Security & Compliance)
File: 0264093f-6791-4475-af34-4b8102dcbcd0.md

title: EC2 Instance Monitoring Disabled hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 0264093f-6791-4475-af34-4b8102dcbcd0 Query name: EC2 Instance Monitoring Disabled Platform: CloudFormation Severity: <span style="color:#ff7213">Medium</span> Category: Observability URL: EC2 Instance should have detailed monitoring enabled. With detailed monitoring enabled data is available in 1-minute periods<br> ```yaml title="Positive test num. 1 - yaml file" hl_lines="7" Resources: MyEC2Instance: Type: AWS::EC2::Instance Properties: ImageId: ami-12345678 InstanceType: t2.micro Monitoring: false ``` ```yaml title="Positive test num. 2 - yaml file" hl_lines="4" Resources: MyEC2Instance: Type: AWS::EC2::Instance Properties: ImageId: ami-12345678 InstanceType: t2.micro ``` ```yaml title="Negative test num. 1 - yaml file" Resources: MyEC2Instance: Type: AWS::EC2::Instance Properties: ImageId: ami-12345678 InstanceType: t2.micro Monitoring: true ```
Project: Meshery (Provisioning / Automation & Configuration)
File: v0.6.88.md

layout: release date: 2023-05-17 tag: v0.6.88 [OPA] initialise OPA policy evaluation engine @Abhishek-kumar09 (#7654) redocs html file @Freedisch (#7678) While importing kubeconfig, showback information about K8s context registration @MdSahil-oss (#7571) Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible in /scripts/component_generation @dependabot (#7674) Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible in /scripts/component_updation @dependabot (#7675) application-to-design-conversion: add ID to each component @Abhishek-kumar09 (#7664) fix skipped nil checks in meshery server handlers @ayushthe1 (#7400) [storybook] Codemirror v6 editor story @acald-creator (#7653) docker extension user profile section refactored @Ambareen09 (#7604) Add ability to disable operator through meshconfig @abdullah1308 (#7259) Updated Command descriptions @thisiskaransgit (#7605) fix: mui datatables warning for scrollMaxHeight @Abhishek-kumar09 (#7695) Updated the application icon with the one from figma files @UsmanDev09 (#7689) [Extensions] Dark mode color reference update @Chadha93 (#7670) [chore] Fix eslint error in UI @theBeginner86 (#7684) updating header for mobile view @parmishh (#7577) helm logo dark mode @duckling69 (#7676) Created an Avatar component for storybook @UsmanDev09 (#7663) [Bug] Fix Filters page @theBeginner86 (#7668) Update node version in README.md @duckling69 (#7667) Fix Remote component passed as undefined @MUzairS15 (#7660) Duplicate cypress tag FIX @Azanul (#7655) Tooltip added for each adapter in MeshAdapterConfigComponent @UsmanDev09 (#7636) [feat] : smooth notification modal appearance @vedant-jain03 (#7554) Moved Storybook to its own directory @acald-creator (#7621) [Bug] Fix Filters page @theBeginner86 (#7668) [Bug] Fix Filters page @theBeginner86 (#7668) Fix concurrent map writes #7386 @Revolyssup (#7652) [chore] Fix eslint error in UI @theBeginner86 (#7684) redocly docs generation @Freedisch (#7534) Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible @dependabot (#7673) [CI] Meshery Playground: Combine workflows to prevent twice daily downtime @leecalcote (#7677) Update meshery logo @goldfishdolphin (#7562) Replace the Logo of Layer5 with Meshery in config.yml workflow @anshgoyalevil (#7586) update Maintainers.md @ritiksaxena124 (#7648) [extension] Add support to search users @theBeginner86 (#7683) Created an Avatar component for storybook @UsmanDev09 (#7663) fixed table header and updated overview link @rijusougata13 (#7597) feat: updated docs descriptions @thisiskaransgit (#7607) Thank you to our contributors for making this release possible: @Abhishek-kumar09, @Ambareen09, @Azanul, @Chadha93, @Freedisch, @MUzairS15, @MdSahil-oss, @Revolyssup, @UsmanDev09, @abdullah1308, @acald-creator, @anshgoyalevil, @ayushthe1, @dependabot, @dependabot[bot], @duckling69, @goldfishdolphin, @l5io, @leecalcote, @muhammmadusman3211, @parmishh, @rijusougata13, @ritiksaxena124, @theBeginner86, @thisiskaransgit, @vedant-jain03, MUzairS15 and l5io
Project: KICS (Provisioning / Security & Compliance)
File: 9ed08714-b2f3-4c6d-8fb0-ac0b74ad71d8.md

title: BOM - GCP PST hide: toc: true navigation: true <style> .highlight .hll { background-color: #ff171742; } .md-content { max-width: 1100px; margin: 0 auto; } </style> Query id: 9ed08714-b2f3-4c6d-8fb0-ac0b74ad71d8 Query name: BOM - GCP PST Platform: GoogleDeploymentManager Severity: <span style="color:#CCCCCC">Trace</span> Category: Bill Of Materials URL: A list of Pub/Sub Topic resources found. Cloud Pub/Sub is designed to provide reliable, many-to-many, asynchronous messaging between applications. Publisher applications can send messages to a 'topic' and other applications can subscribe to that topic to receive the messages.<br> ```yaml title="Positive test num. 1 - yaml file" hl_lines="8 3" resources: type: pubsub.v1.topic name: topic-1 properties: kmsKeyName: some key topic: classified-topic type: pubsub.v1.topic name: topic-2 properties: topic: classified-topic ``` ```yaml title="Negative test num. 1 - yaml file" resources: name: vm-template4 type: compute.v1.instance properties: zone: us-central1-a machineType: zones/us-central1-a/machineTypes/n1-standard-1 disks: deviceName: boot type: PERSISTENT boot: true autoDelete: true initializeParams: sourceImage: projects/debian-cloud/global/images/family/debian-9 diskEncryptionKey: sha_256: 68b4caecf5d5130426a8b8f0222cdd7f31232b5c99a5bf0daf19099e26e2ec29 rawKey: SGVsbG8gZnJvbSBHb29nbGUgQ2xvdWQgUGxhdGZvcm0= networkInterfaces: network: global/networks/default ```
Project: YDB (App Definition and Development / Database)
File: topic-drop.md

You can use the `topic drop` subcommand to delete a topic. {% note info %} Deleting a topic also deletes all the consumers added for it. {% endnote %} General format of the command: ```bash {{ ydb-cli }} [global options...] topic drop <topic-path> ``` `global options`: . `topic-path`: Topic path. View the description of the delete topic command: ```bash {{ ydb-cli }} topic drop --help ``` {% include %} Delete the topic: ```bash {{ ydb-cli }} -p quickstart topic drop my-topic ```
Project: Veinmind Tools (Provisioning / Security & Compliance)
File: veinmind-runner.md

veinmind-runner is a veinmind container security tool platform developed by Chaitin Technology ``` -e, --exit-code int exit-code when veinmind-runner find security issues -g, --glob string specifies the pattern of plugin file to find -h, --help help for veinmind-runner -o, --output string output filepath of report --threads int threads for scan action (default 5) ``` - Analyze Veinmind Report With OpenAI. - Authz as docker plugin - Generate the autocompletion script for the specified shell - Generate relevant information - List relevant information - Scan cloud native objects security, include image/container/iac
Project: Meshery (Provisioning / Automation & Configuration)
File: v0.5.0-beta-3.md

layout: release date: 2021-02-21 tag: v0.5.0-beta-3 [mesheryctl] Consider OS specific paths in system config CLIs @hexxdump (#2419) [mesheryctl] fix context support for all commands, clean-up @aneeshnema (#2412) [ImgBot] Optimize images @imgbot (#2423) Fixed formatting of minikube installation page @pranav-bhatt (#2416) [mesheryctl] refactor usage of `--context` flags for "context support" @navendu-pottekkat (#2408) [mesheryctl] Feature: "context support" for system start command @navendu-pottekkat (#2407) [mesheryctl] Bug Fix- `system start` fails to pull docker image if the version is not specified in the config.yaml file @navendu-pottekkat (#2405) [mesheryctl] Feature: Added helper function for current-context support @aneeshnema (#2397) Add support for meshmap metadata in patternfiles @utkarsh-pro (#2392) added documentation on meshsync,operator and database @kumarabd (#2381) docs: correct typo in minikube doc @subhamkrai (#2390) updated minikube docs @pranav-bhatt (#2387) Added Metabob entry in Adopters.md @chinmaym07 (#2378) [mesheryctl] platform support for kubernetes in `system start` (`platform: kubernetes`) @navendu-pottekkat (#2365) Meshworks @utkarsh-pro (#2384) [mesheryctl] Rework mesheryctl system channel to confirm to latest design and make it context and compose aware. Fixes #2246 @anirudhjain75 (#2256) Added support for remote Persistence of SMI data @dhruv0000 (#2371) Feature: MeshWorks and Patternfiles @leecalcote (#2339) Bump billboard.js from 1.11.0 to 2.2.1 in /ui @dependabot-preview (#2332)
Project: Podman (App Definition and Development / Application Definition & Image Build)
File: os-version.image.md

Set the exact required operating system version for the image which is built. By default, if the image is not based on scratch, the base image's required OS version is kept, if the base image specified one. This option is typically only meaningful when the image's OS is Windows, and is typically set in Windows base images, so using this option is usually unnecessary.
Project: ArangoDB (App Definition and Development / Database)
File: LICENSE.md

BSD 3-Clause License Copyright (c) 2014, Nathan LaFreniere and other All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Project: Open Policy Administration Layer (OPAL) (Provisioning / Security & Compliance)
File: CONTRIBUTING.md

We would love for you to contribute to this project and help make it even better than it is today! As a contributor, here are the guidelines we would like you to follow: - - Help us keep this community open and inclusive. Come talk to us about OPAL, or authorization in general - we would love to hear from you You can: Raise questions in our Report issues and ask for features in Follow us on to get the latest OPAL updates Join our to chat about authorization, open-source, realtime communication, tech or anything else! We are super available on slack ;) If you are using our project, please consider giving us a </br> </br> ]][badge-twitter-link] If you find a bug in the source code, you can help us by or even better, you can with a fix. You can request a new feature by to our GitHub Repository. Issues are submitted to our . Before you submit an issue, please search the issue tracker, maybe an issue for your problem already exists and the discussion might inform you of workarounds readily available. We want to fix all the issues as soon as possible, but before fixing a bug we need to reproduce and confirm it. In order to reproduce bugs, we require that you provide: Full logs of opal server and opal client Your configuration for OPAL server and OPAL client i.e: docker compose, Kubernetes YAMLs, environment variables, etc. you should redact any secrets/tokens/api keys in your config PRs are submitted . Pull requests are welcome! (please make sure to include passing tests and docs) Prior to submitting a PR - open an issue on GitHub, or make sure your PR addresses an existing issue well.
Project: Meshery (Provisioning / Automation & Configuration)
File: v0.5.61.md

layout: release date: 2021-09-28 tag: v0.5.61 Change watchtower image @suhaniii (#4246) fixed the failing integration test for check_test.go @sayantan1413 (#4255) [Broadcast] Readjust fields for latest Meshkit broadcaster @bariqhibat (#4251) [mesheryctl] Refactor kubeconfig setting logic in `config.go` @navendu-pottekkat (#4258) relocated the perf profile button @asubedy (#4223) [UI] appllication configuration + New icon for configuration @Chadha93 (#4093) [UI] appllication configuration + New icon for configuration @Chadha93 (#4093) Adds k8s native pattern component generation @Revolyssup (#4254) osm error codes are generated now @warunicorn19 (#4248) Thank you to our contributors for making this release possible: @Chadha93, @Revolyssup, @asubedy, @bariqhibat, @leecalcote, @navendu-pottekkat, @sayantan1413, @suhaniii, @utkarsh-pro and @warunicorn19
Project: YugabyteDB (App Definition and Development / Database)
File: create_index,index_elem.grammar.md

```output.ebnf create_index ::= CREATE [ UNIQUE ] INDEX [ CONCURRENTLY | NONCONCURRENTLY ] [ [ IF NOT EXISTS ] name ] ON [ ONLY ] table_name [ USING accessmethodname ] ( index_elem [ , ... ] ) [ INCLUDE ( column_name [ , ... ] ) ] [ TABLESPACE tablespace_name ] [ WHERE boolean_expression ] indexelem ::= { columnname | ( expression ) } [ operatorclassname ] [ HASH | ASC | DESC ] [ NULLS { FIRST | LAST } ] ```
Project: LinuxKit (Provisioning / Automation & Configuration)
File: CODE_OF_CONDUCT.md

In the interest of fostering an open and welcoming environment, we as contributors and maintainers pledge to making participation in our project and our community a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, gender identity and expression, level of experience, nationality, personal appearance, race, religion, or sexual identity and orientation. Examples of behavior that contributes to creating a positive environment include: Using welcoming and inclusive language Being respectful of differing viewpoints and experiences Gracefully accepting constructive criticism Focusing on what is best for the community Showing empathy towards other community members Examples of unacceptable behavior by participants include: The use of sexualized language or imagery and unwelcome sexual attention or advances Trolling, insulting/derogatory comments, and personal or political attacks Public or private harassment Publishing others' private information, such as a physical or electronic address, without explicit permission Other conduct which could reasonably be considered inappropriate in a professional setting Project maintainers are responsible for clarifying the standards of acceptable behavior and are expected to take appropriate and fair corrective action in response to any instances of unacceptable behavior. Project maintainers have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct, or to ban temporarily or permanently any contributor for other behaviors that they deem inappropriate, threatening, offensive, or harmful. This Code of Conduct applies both within project spaces and in public spaces when an individual is representing the project or its community. Examples of representing a project or community include using an official project e-mail address, posting via an official social media account, or acting as an appointed representative at an online or offline event. Representation of a project may be further defined and clarified by project maintainers. Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by contacting the project team at . All complaints will be reviewed and investigated and will result in a response that is deemed necessary and appropriate to the circumstances. The project team is obligated to maintain confidentiality with regard to the reporter of an incident. Further details of specific enforcement policies may be posted separately. Project maintainers who do not follow or enforce the Code of Conduct in good faith may face temporary or permanent repercussions as determined by other members of the project's leadership. This Code of Conduct is adapted from the , version 1.4, available at
Project: Beam (App Definition and Development / Streaming & Messaging)
File: get-help.md

title: "Get Help Contributing" <!-- Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. --> If you have any trouble contributing, don't give up! Check the <a href="https://cwiki.apache.org/confluence/display/BEAM/Contributor+FAQ" target="_blank">FAQ on our developers' wiki <img src="/images/external-link-icon.png" alt="External link to Beam developers' Wiki" width="14px" height="14px"></a>. Send email to the Beam developer community on Find someone to chat with in realtime at .
Project: Pinniped (Provisioning / Key Management)
File: active-directory-configuration.md

title: Active Directory Configuration description: See the default configuration values for the ActiveDirectoryIdentityProvider. cascade: layout: docs menu: docs: name: Active Directory Configuration weight: 10 parent: reference This describes the default values for the `ActiveDirectoryIdentityProvider` user and group search. For more about `ActiveDirectoryIdentityProvider` configuration, see . Default Behavior: Queries the Active Directory host for the . Implications: Searches your entire domain for users. It may make sense to specify a subtree as a search base if you wish to exclude some users for security reasons or to make searches faster. Default Behavior: The `userPrincipalName` attribute will become the user's Kubernetes username. Default Behavior: The `objectGUID` attribute will be used to uniquely identify users. Default Behavior: ``` "(&(objectClass=person)(!(objectClass=computer))(!(showInAdvancedViewOnly=TRUE))(|(sAMAccountName={})(mail={})(userPrincipalName={}))(sAMAccountType=805306368))" ``` Requires the following of the Active Directory entry of the user specified: is a person. is not a computer. is not shown in advanced view only (which would likely mean its a system created service account with advanced permissions). either the `sAMAccountName`, the `userPrincipalName`, or the `mail` attribute matches the input username. the `sAMAccountType` is for a normal user account. Default Behavior: Queries the Active Directory host for the . Implications: Searches your entire domain for groups. It may make sense to specify a subtree as a search base if you wish to exclude some groups for security reasons or to make searches faster. Default Behavior: The attribute that will become the user's groups in Kubernetes will look like `sAMAccountName@domain` (where domain is constructed from the domain components of the group). Default Behavior: ``` (&(objectClass=group)(member:1.2.840.113556.1.4.1941:={})) ``` Requires the following of the Active Directory entrys that will represent the groups: is a group. has a member that matches the DN of the user we successfully logged in as, including indirectly through nested groups. Implications: Nested group search may be slow. If you are having performance issues during login, you can change the filter to the following: ``` (&(objectClass=group)(member={})) ```
Project: Podman (App Definition and Development / Application Definition & Image Build)
File: podman-container-prune.1.md

% podman-container-prune 1 podman\-container\-prune - Remove all stopped containers from local storage podman container prune [options] podman container prune removes all stopped containers from local storage. Provide filter values. The filters argument format is of `key=value`. If there is more than one filter, then pass multiple OPTIONS: --filter foo=bar --filter bif=baz. Supported filters: | Filter | Description | |::|| | label | Only remove containers, with (or without, in the case of label!=[...] is used) the specified labels. | | until | Only remove containers created before given timestamp. | The `label` filter accepts two formats. One is the `label`=key or `label`=key=value, which removes containers with the specified labels. The other format is the `label!`=key or `label!`=key=value, which removes containers without the specified labels. The `until` filter can be Unix timestamps, date formatted timestamps, or Go duration strings (e.g. 10m, 1h30m) computed relative to the machines time. Do not provide an interactive prompt for container removal.\ The default is false. -h, --help Print usage statement.\ The default is false. Remove all stopped containers from local storage: ``` $ podman container prune WARNING! This will remove all stopped containers. Are you sure you want to continue? [y/N] y 878392adf2e6c5c9bb1fc19b69d37d2e98c8abf9d539c0bce4b15b46bbcce471 37664467fbe3618bf9479c34393ac29c02696675addf1750f9e346581636cde7 ed0c6468b8e1cb641b4621d1fe30cb477e1fefc5c0bceb66feaf2f7cb50e5962 6ac6c8f0067b7a4682e6b8e18902665b57d1a0e07e885d9abcd382232a543ccd fff1c5b6c3631746055ec40598ce8ecaa4b82aef122f9e3a85b03b55c0d06c23 602d343cd47e7cb3dfc808282a9900a3e4555747787ec6723bb68cedab8384d5 ``` Remove all stopped containers from local storage without confirmation: ``` $ podman container prune -f 878392adf2e6c5c9bb1fc19b69d37d2e98c8abf9d539c0bce4b15b46bbcce471 37664467fbe3618bf9479c34393ac29c02696675addf1750f9e346581636cde7 ed0c6468b8e1cb641b4621d1fe30cb477e1fefc5c0bceb66feaf2f7cb50e5962 6ac6c8f0067b7a4682e6b8e18902665b57d1a0e07e885d9abcd382232a543ccd fff1c5b6c3631746055ec40598ce8ecaa4b82aef122f9e3a85b03b55c0d06c23 602d343cd47e7cb3dfc808282a9900a3e4555747787ec6723bb68cedab8384d5 ``` Remove all stopped containers from local storage created before the last 10 minutes: ``` $ podman container prune --filter until="10m" WARNING! This will remove all stopped containers. Are you sure you want to continue? [y/N] y 3d366295e33d8cc612c4d873199bacadd55088d90d17dcafaa9a2d317ad50b4e ``` , December 2018, Originally compiled by Brent Baude <bbaude@redhat.com>\ December 2020, converted filter information from docs.docker.com documentation by Dan Walsh <dwalsh@redhat.com>