Skip to content

Commit ae6ece1

Browse files
DefinetlyNotAIDefinetlyNotAI
authored
Merge pull request #2 from DefinetlyNotAI/beta2
2 parents e8a3c47 + c8d79bf commit ae6ece1

15 files changed

+518
-110
lines changed

‎.github/CODEOWNERS

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
* @DefinetlyNotAI

‎.github/FUNDING.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
# These are supported funding model platforms
2+
3+
github: DefinetlyNotAI
4+
buy_me_a_coffee: DefinetlyNotAI

‎.github/ISSUE_TEMPLATE/bug_report.yml

Lines changed: 67 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,67 @@
1+
name: Report a bug
2+
description: Tell us about a bug or issue you may have identified in MalwareBuilder.
3+
title: "Provide a general summary of the issue"
4+
assignees: "DefinetlyNotAI"
5+
body:
6+
- type: checkboxes
7+
attributes:
8+
label: Prerequisites
9+
description: Take a couple minutes to help our maintainers work faster.
10+
options:
11+
- label: I have [searched](https://github.com/DefinetlyNotAI/MalwareBuilder/issues?utf8=%E2%9C%93&q=is%3Aissue) for duplicate or closed issues.
12+
required: true
13+
- label: I have checked that I am on the latest release, and have made sure no external modification are responsible for this bug.
14+
required: true
15+
- type: textarea
16+
id: what-happened
17+
attributes:
18+
label: Describe the issue
19+
description: Provide a summary of the issue and what you expected to happen, including specific steps to reproduce.
20+
validations:
21+
required: true
22+
- type: textarea
23+
id: d_log
24+
attributes:
25+
label: CLI output
26+
description: Include the CLI output here if possible.
27+
validations:
28+
required: false
29+
- type: textarea
30+
id: extra
31+
attributes:
32+
label: Anything else?
33+
description: Include anything you deem important.
34+
validations:
35+
required: false
36+
- type: dropdown
37+
id: flags_list
38+
attributes:
39+
label: What features were you using to run MalwareBuilder?
40+
multiple: true
41+
options:
42+
- Remove() features
43+
- Spam() features
44+
- Destroy() features
45+
- Tomfoolery() features
46+
- Custom features
47+
validations:
48+
required: true
49+
- type: dropdown
50+
id: file_list
51+
attributes:
52+
label: What part of MalwareBuilder failed?
53+
multiple: false
54+
options:
55+
- Malware Builder process (MalwareBuilder.py)
56+
- Infection process (Infect.exe)
57+
- Curing process (Cure.exe)
58+
- Nothing/Other
59+
validations:
60+
required: true
61+
- type: input
62+
id: version
63+
attributes:
64+
label: What version of MalwareBuilder are you using?
65+
placeholder: "e.g., beta.1"
66+
validations:
67+
required: true

‎.github/ISSUE_TEMPLATE/config.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
blank_issues_enabled: false
2+
contact_links:
3+
- name: GitHub Community Support
4+
url: https://github.com/orgs/community/discussions
5+
about: Please ask and answer questions here.

‎.github/ISSUE_TEMPLATE/feature_request.yml

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
name: Feature request
2+
description: Suggest new or updated features to include in MalwareBuilder.
3+
title: "Suggest a new feature"
4+
assignees: "DefinetlyNotAI"
5+
body:
6+
- type: checkboxes
7+
attributes:
8+
label: Prerequisites
9+
description: Take a couple minutes to help our maintainers work faster.
10+
options:
11+
- label: I have [searched](https://github.com/DefinetlyNotAI/MalwareBuilder/issues?utf8=%E2%9C%93&q=is%3Aissue) for duplicate or closed feature requests
12+
required: true
13+
- label: I would like to contribute this request (Optional).
14+
required: false
15+
- type: textarea
16+
id: proposal
17+
attributes:
18+
label: Proposal
19+
description: Provide detailed information for what we should add, including relevant links to prior art, screenshots, or live demos whenever possible.
20+
validations:
21+
required: true
22+
- type: textarea
23+
id: motivation
24+
attributes:
25+
label: Motivation and context
26+
description: Tell us why this change is needed or helpful, and what problems it may help solve.
27+
validations:
28+
required: true
29+
- type: dropdown
30+
id: importance
31+
attributes:
32+
label: What is the importance for implementing this idea?
33+
multiple: false
34+
options:
35+
- High
36+
- Normal
37+
- Low
38+
- N/A
39+
validations:
40+
required: true

‎.github/PULL_REQUEST_TEMPLATE.md

Lines changed: 43 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,43 @@
1+
## Pull Request Template
2+
3+
### Prerequisites
4+
5+
<!-- Take a couple of minutes to help our maintainers work faster by checking of the pre-requisites. -->
6+
<!-- To tick the checkboxes replace the space with an 'x', so [ ] becomes [x] . -->
7+
8+
- [ ] I have [searched](https://github.com/DefinetlyNotAI/MalwareBuilder/pulls) for duplicate or closed issues.
9+
- [ ] I have updated the documentation accordingly, if required.
10+
11+
### PR Type
12+
13+
<!-- Take a couple of minutes to help our maintainers work faster by telling us what is the PR guided on. -->
14+
<!-- To tick the checkboxes replace the space with an 'x', so [ ] becomes [x] . -->
15+
16+
- [ ] Bug fix <!-- Non-Breaking Bug Fix - Usually relates to fixing an issue -->
17+
- [ ] Deprecation Change <!-- Removing a deprecation -->
18+
- [ ] New feature <!-- Non-Breaking Change that adds a new feature -->
19+
- [ ] Refactoring <!-- Non-Breaking Change that modifies existing code to refactor it to become more organised -->
20+
- [ ] ⚠️ Breaking change ⚠️ <!-- Breaking Bug Fix / New Addition that changes how MalwareBuilder works -->
21+
22+
### Description
23+
24+
<!-- REQUIRED: Provide a summary of the PR and what you expected to happen. -->
25+
26+
### Motivation and Context
27+
28+
<!-- REQUIRED: Why is this PR required? What problem does it solve? Why do you want to do it? -->
29+
30+
### Credit
31+
32+
<!-- If this PR is a contribution, please mention the contributors here using the appropriate syntax. -->
33+
34+
<!--
35+
### File-Created/CONTRIBUTION by MAIN-Username
36+
What you did, created, removed, refactored, fixed, or discovered.
37+
- [Your GitHub Username](https://github.com/YourGitHubLink)
38+
- [Your GitHub Username](https://github.com/YourGitHubLink) etc...
39+
-->
40+
41+
### Issues Fixed
42+
43+
<!-- REQUIRED: What issues will be fixed? (Format: "#50, #23" etc.) if none exist type _N/A_ -->

‎.github/dependabot.yml

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
# To get started with Dependabot version updates, you'll need to specify which
2+
# package ecosystems to update and where the package manifests are located.
3+
# Please see the documentation for all configuration options:
4+
# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
5+
version: 2
6+
updates:
7+
- package-ecosystem: "pip"
8+
directory: "/"
9+
schedule:
10+
interval: "daily"
11+
open-pull-requests-limit: 10
12+
labels:
13+
- "type/Dependencies"
14+
15+
- package-ecosystem: github-actions
16+
directory: /
17+
schedule:
18+
interval: daily
19+
labels:
20+
- "type/Dependencies"
21+
- "type/Github Actions"

‎.github/workflows/dependency-review.yml

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
# Dependency Review Action
2+
#
3+
# This Action will scan dependency manifest files that change as part of a Pull Request,
4+
# surfacing known-vulnerable versions of the packages declared or updated in the PR.
5+
# Once installed, if the workflow run is marked as required,
6+
# PRs introducing known-vulnerable packages will be blocked from merging.
7+
#
8+
# Source repository: https://github.com/actions/dependency-review-action
9+
name: 'Dependency Review'
10+
on: [pull_request]
11+
12+
permissions:
13+
contents: read
14+
15+
jobs:
16+
dependency-review:
17+
runs-on: ubuntu-latest
18+
steps:
19+
- name: Harden Runner
20+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
21+
with:
22+
egress-policy: audit
23+
24+
- name: 'Checkout Repository'
25+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
26+
- name: 'Dependency Review'
27+
uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5.0

‎.github/workflows/greetings.yml

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
name: Greetings
2+
3+
on: [pull_request_target, issues]
4+
5+
permissions:
6+
contents: read
7+
8+
jobs:
9+
greeting:
10+
runs-on: ubuntu-latest
11+
permissions:
12+
issues: write
13+
pull-requests: write
14+
steps:
15+
- name: Harden Runner
16+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
17+
with:
18+
egress-policy: audit
19+
20+
- uses: actions/first-interaction@3c71ce730280171fd1cfb57c00c774f8998586f7 # v1
21+
with:
22+
repo-token: ${{ secrets.GITHUB_TOKEN }}
23+
issue-message: "Hi! Thanks for pointing out an issue/suggestion for the first time to MalwareBuilder 🤗 We hope it goes as smoothly as possible."
24+
pr-message: "Hi! Thanks for contributing for the first time to MalwareBuilder 🤗 We hope it goes as smoothly as possible and appreciate your valuable contribution."

‎.github/workflows/scorecard.yml

Lines changed: 78 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,78 @@
1+
# This workflow uses actions that are not certified by GitHub. They are provided
2+
# by a third-party and are governed by separate terms of service, privacy
3+
# policy, and support documentation.
4+
5+
name: Scorecard supply-chain security
6+
on:
7+
# For Branch-Protection check. Only the default branch is supported. See
8+
# https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
9+
branch_protection_rule:
10+
# To guarantee Maintained check is occasionally updated. See
11+
# https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
12+
schedule:
13+
- cron: '33 9 * * 6'
14+
push:
15+
branches: [ "main" ]
16+
17+
# Declare default permissions as read only.
18+
permissions: read-all
19+
20+
jobs:
21+
analysis:
22+
name: Scorecard analysis
23+
runs-on: ubuntu-latest
24+
permissions:
25+
# Needed to upload the results to code-scanning dashboard.
26+
security-events: write
27+
# Needed to publish results and get a badge (see publish_results below).
28+
id-token: write
29+
# Uncomment the permissions below if installing in a private repository.
30+
# contents: read
31+
# actions: read
32+
33+
steps:
34+
- name: Harden Runner
35+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
36+
with:
37+
egress-policy: audit
38+
39+
- name: "Checkout code"
40+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
41+
with:
42+
persist-credentials: false
43+
44+
- name: "Run analysis"
45+
uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
46+
with:
47+
results_file: results.sarif
48+
results_format: sarif
49+
# (Optional) "write" PAT token. Uncomment the `repo_token` line below if:
50+
# - you want to enable the Branch-Protection check on a *public* repository, or
51+
# - you are installing Scorecard on a *private* repository
52+
# To create the PAT, follow the steps in https://github.com/ossf/scorecard-action?tab=readme-ov-file#authentication-with-fine-grained-pat-optional.
53+
repo_token: ${{ secrets.SCORECARD_TOKEN }}
54+
55+
# Public repositories:
56+
# - Publish results to OpenSSF REST API for easy access by consumers
57+
# - Allows the repository to include the Scorecard badge.
58+
# - See https://github.com/ossf/scorecard-action#publishing-results.
59+
# For private repositories:
60+
# - `publish_results` will always be set to `false`, regardless
61+
# of the value entered here.
62+
publish_results: true
63+
64+
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
65+
# format to the repository Actions tab.
66+
- name: "Upload artifact"
67+
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v3.pre.node20
68+
with:
69+
name: SARIF file
70+
path: results.sarif
71+
retention-days: 5
72+
73+
# Upload the results to GitHub's code scanning dashboard (optional).
74+
# Commenting out will disable upload of results to your repo's Code Scanning dashboard
75+
- name: "Upload to code-scanning"
76+
uses: github/codeql-action/upload-sarif@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
77+
with:
78+
sarif_file: results.sarif

0 commit comments

Comments
 (0)