From c0a784a88c8af3dc5877644c0768c0ebd5158a58 Mon Sep 17 00:00:00 2001 From: Fabio Pinto Date: Mon, 23 Sep 2024 15:17:55 +0100 Subject: [PATCH 1/2] Adds License to repo, bumps sbomrepo version and improves views --- LICENSE | 21 +++++++++++++++++++ surface/sca/templates/views/dependencies.html | 2 +- .../sca/templates/views/vulnerabilities.html | 2 +- surface/surface/settings.py | 6 +++--- 4 files changed, 26 insertions(+), 5 deletions(-) create mode 100644 LICENSE diff --git a/LICENSE b/LICENSE new file mode 100644 index 00000000..04dbd8c9 --- /dev/null +++ b/LICENSE @@ -0,0 +1,21 @@ +MIT License + +Copyright (c) 2023 Surface Security + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. diff --git a/surface/sca/templates/views/dependencies.html b/surface/sca/templates/views/dependencies.html index cee200d1..1363b300 100644 --- a/surface/sca/templates/views/dependencies.html +++ b/surface/sca/templates/views/dependencies.html @@ -59,7 +59,7 @@ {% endif %} - +
diff --git a/surface/sca/templates/views/vulnerabilities.html b/surface/sca/templates/views/vulnerabilities.html index a31933d5..ef01d7d1 100644 --- a/surface/sca/templates/views/vulnerabilities.html +++ b/surface/sca/templates/views/vulnerabilities.html @@ -44,7 +44,7 @@ {% endif %} -
Dependency
+
diff --git a/surface/surface/settings.py b/surface/surface/settings.py index d9f088e3..a9f85a02 100644 --- a/surface/surface/settings.py +++ b/surface/surface/settings.py @@ -52,7 +52,7 @@ "django.middleware.security.SecurityMiddleware", "django.contrib.sessions.middleware.SessionMiddleware", "django.middleware.common.CommonMiddleware", - "django.middleware.csrf.CsrfViewMiddleware", + #"django.middleware.csrf.CsrfViewMiddleware", "django.contrib.auth.middleware.AuthenticationMiddleware", "django.contrib.messages.middleware.MessageMiddleware", "django.middleware.clickjacking.XFrameOptionsMiddleware", @@ -190,8 +190,8 @@ SCA_INTERNAL_RENOVATE = ENV_VAR("SURF_SCA_INTERNAL_RENOVATE", default=None) SCA_INTERNAL_GITLAB_API = ENV_VAR("SURF_SCA_INTERNAL_GITLAB_API", default=None) -SURFACE_GITHUB_TOKEN = ENV_VAR("SURF_GITLAB_TOKEN", default=None) -SURFACE_GITLAB_TOKEN = ENV_VAR("SURF_GITHUB_TOKEN", default=None) +SURFACE_GITHUB_TOKEN = ENV_VAR("SURF_GITHUB_TOKEN", default=None) +SURFACE_GITLAB_TOKEN = ENV_VAR("SURF_GITLAB_TOKEN", default=None) SURFACE_LINKS_ITEMS = None From 74817ca6c04fd328ad903e005bfde07f79084c75 Mon Sep 17 00:00:00 2001 From: Fabio Pinto Date: Mon, 23 Sep 2024 15:19:13 +0100 Subject: [PATCH 2/2] . --- surface/surface/settings.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/surface/surface/settings.py b/surface/surface/settings.py index a9f85a02..367e7f5e 100644 --- a/surface/surface/settings.py +++ b/surface/surface/settings.py @@ -52,7 +52,7 @@ "django.middleware.security.SecurityMiddleware", "django.contrib.sessions.middleware.SessionMiddleware", "django.middleware.common.CommonMiddleware", - #"django.middleware.csrf.CsrfViewMiddleware", + "django.middleware.csrf.CsrfViewMiddleware", "django.contrib.auth.middleware.AuthenticationMiddleware", "django.contrib.messages.middleware.MessageMiddleware", "django.middleware.clickjacking.XFrameOptionsMiddleware",
Vulnerability ID