Skip to content

Commit bf853e1

Browse files
laubezout-theolaubezout-theo
committed
Merge branch 'INDIGO-V1' into main
2 parents d5f41d6 + d09094b commit bf853e1

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

52 files changed

+2087
-676
lines changed

‎.github/ISSUE_TEMPLATE/bug_report.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ Le cas échéant, ajoutez des captures d'écran pour expliquer votre problème.
2727
- OS [par exemple Windows]
2828
- Navigateur [par exemple chrome, safari]
2929
- Version Node.js [par exemple 14.15.0]
30-
- Version php [par exemple 7.4]
30+
- Version docker [par exemple 19.03.00]
3131

3232
** Contexte supplémentaire **
3333
Ajoutez ici tout autre contexte sur le problème.

‎.github/ISSUE_TEMPLATE/demande-de-fonctionnalit-.md renamed to ‎.github/ISSUE_TEMPLATE/demande-de-fonction.md

File renamed without changes.

‎.github/dependabot.yml

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
# To get started with Dependabot version updates, you'll need to specify which
2+
# package ecosystems to update and where the package manifests are located.
3+
# Please see the documentation for all configuration options:
4+
# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
5+
6+
version: 2
7+
updates:
8+
- package-ecosystem: "npm" # See documentation for possible values
9+
directory: "/" # Location of package manifests
10+
schedule:
11+
interval: "daily"

‎.github/workflows/anchore-analysis.yml

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
# This workflow checks out code, builds an image, performs a container image
2+
# vulnerability scan with Anchore's Grype tool, and integrates the results with GitHub Advanced Security
3+
# code scanning feature. For more information on the Anchore scan action usage
4+
# and parameters, see https://github.com/anchore/scan-action. For more
5+
# information on Anchore's container image scanning tool Grype, see
6+
# https://github.com/anchore/grype
7+
name: Anchore Container Scan
8+
on:
9+
workflow_dispatch:
10+
schedule:
11+
- cron: '0 0 */10 * *'
12+
13+
jobs:
14+
Anchore-Build-Scan:
15+
runs-on: ubuntu-latest
16+
steps:
17+
- name: Checkout the code
18+
uses: actions/checkout@v2
19+
- name: Build the Docker image
20+
run: docker build ./indigo/docker/build-dev-run --tag localbuild/testimage:latest
21+
- name: Run the Anchore scan action itself with GitHub Advanced Security code scanning integration enabled
22+
uses: anchore/scan-action@main
23+
with:
24+
image: "localbuild/testimage:latest"
25+
acs-report-enable: true
26+
- name: Upload Anchore Scan Report
27+
uses: github/codeql-action/upload-sarif@v1
28+
with:
29+
sarif_file: results.sarif

‎.github/workflows/codeql-analysis.yml

Lines changed: 51 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,51 @@
1+
# For most projects, this workflow file will not need changing; you simply need
2+
# to commit it to your repository.
3+
#
4+
# You may wish to alter this file to override the set of languages analyzed,
5+
# or to provide custom queries or build logic.
6+
#
7+
# ******** NOTE ********
8+
# We have attempted to detect the languages in your repository. Please check
9+
# the `language` matrix defined below to confirm you have the correct set of
10+
# supported CodeQL languages.
11+
#
12+
name: "CodeQL"
13+
14+
on:
15+
push:
16+
pull_request:
17+
schedule:
18+
- cron: '0 0 */5 * *'
19+
20+
jobs:
21+
analyze:
22+
name: Analyze
23+
runs-on: ubuntu-latest
24+
25+
strategy:
26+
fail-fast: false
27+
matrix:
28+
language: [ 'javascript' ]
29+
# CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ]
30+
# Learn more:
31+
# https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed
32+
33+
steps:
34+
- name: Checkout repository
35+
uses: actions/checkout@v2
36+
37+
# Initializes the CodeQL tools for scanning.
38+
- name: Initialize CodeQL
39+
uses: github/codeql-action/init@v1
40+
with:
41+
languages: ${{ matrix.language }}
42+
# If you wish to specify custom queries, you can do so here or in a config file.
43+
# By default, queries listed here will override any specified in a config file.
44+
# Prefix the list here with "+" to use these queries and those in the config file.
45+
# queries: ./path/to/local/query, your-org/your-repo/queries@main
46+
47+
# ℹ️ Command-line programs to run using the OS shell.
48+
# 📚 https://git.io/JvXDl
49+
50+
- name: Perform CodeQL Analysis
51+
uses: github/codeql-action/analyze@v1

‎.github/workflows/npm-publish.yml

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
# This workflow will run tests using node and then publish a package to GitHub Packages when a release is created
2+
# For more information see: https://help.github.com/actions/language-and-framework-guides/publishing-nodejs-packages
3+
4+
name: Publication npm release
5+
6+
on:
7+
release:
8+
types: [created]
9+
10+
jobs:
11+
publish-npm:
12+
runs-on: ubuntu-latest
13+
steps:
14+
- uses: actions/checkout@v2
15+
- uses: actions/setup-node@v1
16+
with:
17+
node-version: 12
18+
registry-url: https://registry.npmjs.org/
19+
- run: npm ci
20+
- run: npm publish --access public
21+
env:
22+
NODE_AUTH_TOKEN: ${{secrets.npm_token}}

‎.github/workflows/ossar-analysis.yml

Lines changed: 51 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,51 @@
1+
# This workflow integrates a collection of open source static analysis tools
2+
# with GitHub code scanning. For documentation, or to provide feedback, visit
3+
# https://github.com/github/ossar-action
4+
name: OSSAR
5+
6+
on:
7+
push:
8+
pull_request:
9+
schedule:
10+
- cron: '0 0 */5 * *'
11+
12+
jobs:
13+
OSSAR-Scan:
14+
# OSSAR runs on windows-latest.
15+
# ubuntu-latest and macos-latest support coming soon
16+
runs-on: windows-latest
17+
18+
steps:
19+
# Checkout your code repository to scan
20+
- name: Checkout repository
21+
uses: actions/checkout@v2
22+
with:
23+
# We must fetch at least the immediate parents so that if this is
24+
# a pull request then we can checkout the head.
25+
fetch-depth: 2
26+
27+
# If this run was triggered by a pull request event, then checkout
28+
# the head of the pull request instead of the merge commit.
29+
- run: git checkout HEAD^2
30+
if: ${{ github.event_name == 'pull_request' }}
31+
32+
# Ensure a compatible version of dotnet is installed.
33+
# The [Microsoft Security Code Analysis CLI](https://aka.ms/mscadocs) is built with dotnet v3.1.201.
34+
# A version greater than or equal to v3.1.201 of dotnet must be installed on the agent in order to run this action.
35+
# GitHub hosted runners already have a compatible version of dotnet installed and this step may be skipped.
36+
# For self-hosted runners, ensure dotnet version 3.1.201 or later is installed by including this action:
37+
# - name: Install .NET
38+
# uses: actions/setup-dotnet@v1
39+
# with:
40+
# dotnet-version: '3.1.x'
41+
42+
# Run open source static analysis tools
43+
- name: Run OSSAR
44+
uses: github/ossar-action@v1
45+
id: ossar
46+
47+
# Upload results to the Security tab
48+
- name: Upload OSSAR results
49+
uses: github/codeql-action/upload-sarif@v1
50+
with:
51+
sarif_file: ${{ steps.ossar.outputs.sarifFile }}

‎CONTRIBUTING.md

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
# Contribuer à indigo
2+
Nous aimons votre contribution ! Nous souhaitons rendre la contribution à ce projet aussi simple et transparente que possible, que ce soit pour :
3+
4+
- Signaler un bug
5+
- Discuter de l'état actuel du code
6+
- Soumettre un correctif
7+
- Proposer de nouvelles fonctionnalités
8+
- Maintenir le code avec nous
9+
10+
## Nous développons avec Github
11+
Nous utilisons github pour héberger le code, pour suivre les issues et les demandes de fonctionnalités, ainsi que pour accepter les Pull Request.
12+
13+
## Nous utilisons Git-Flow
14+
Les contributions sont à effectuer à partir de la branche develop.
15+
Les pull requests sont le meilleur moyen de proposer des modifications sur la branche develop (nous utilisons [Git-Flow](git-flow.readthedocs.io/fr/latest/presentation.html)). Nous accueillons activement vos pull requests:
16+
17+
1. Forkez le repo et créez votre branche à partir de `develop` ou de `main` pour les hotfix.
18+
2. Si vous avez ajouté des fonctionnalités d'utilisation, mettez à jour la documentation.
19+
3. Assurez-vous que la suite de tests réussit.
20+
4. Émettez une pull requests !
21+
22+
## Toutes les contributions que vous apporterez seront sous la licence GPL-3.0
23+
En bref, lorsque vous soumettez des modifications de code, vos soumissions sont considérées comme étant sous la même [licence GPL-3.0](https://choosealicense.com/licenses/gpl-3.0/) qui couvre le projet. N'hésitez pas à contacter les responsables si cela vous pose problème.
24+
25+
## Signaler les bugs à l'aide des [issues](https://github.com/Tidle-Groupe/indigo/issues) de Github
26+
Nous utilisons les issues GitHub pour suivre les bugs publics. Signaler un bug en [ouvrant une nouvelle issue](https://github.com/Tidle-Groupe/indigo/issues/new/choose), c'est si facile!
27+
28+
## Utilisez un style de codage cohérent
29+
Un style de codage cohérent c'est toujours agréable, regardez la structure du code déjà présent.
30+
31+
## Licence
32+
En contribuant, vous acceptez que vos contributions soient concédées sous sa licence GPL-3.0.

‎README.md

Lines changed: 77 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,78 @@
1-
# indigo
2-
Un environnement de programmation léger avec rendu local et construction des fichiers pour la production
1+
<h1 align="center">Indigo</h1>
2+
<p>
3+
<a href="https://www.npmjs.com/package/@tidle-groupe/indigo" target="_blank">
4+
<img alt="Version" src="https://img.shields.io/npm/v/indigo.svg">
5+
</a>
6+
<img src="https://img.shields.io/badge/npm-%3E%3D6.5.0-blue.svg" />
7+
<img src="https://img.shields.io/badge/node-%3E%3D10.0.0-blue.svg" />
8+
<a href="https://github.com/Tidle-Groupe/indigo/wiki" target="_blank">
9+
<img alt="Documentation" src="https://img.shields.io/badge/documentation-yes-brightgreen.svg" />
10+
</a>
11+
<a href="https://github.com/Tidle-Groupe/indigo/graphs/commit-activity" target="_blank">
12+
<img alt="Maintenance" src="https://img.shields.io/badge/Maintained%3F-yes-green.svg" />
13+
</a>
14+
<a href="https://github.com/Tidle-Groupe/indigo/blob/master/LICENSE" target="_blank">
15+
<img alt="License: GPL--3.0" src="https://img.shields.io/github/license/Tidle-Groupe/indigo" />
16+
</a>
17+
</p>
318

4-
[RoadMap](https://trello.com/b/imtsTQsB)
19+
> Un framework de programmation léger avec rendu local du site, assets, api, bases de données et construction des fichiers pour la production.
20+
21+
## Prérequis
22+
23+
- npm >=6.5.0
24+
- node >=10.0.0
25+
- Docker >=19.03.00
26+
27+
## Installation
28+
29+
```sh
30+
npm i -g @tidle-groupe/indigo
31+
```
32+
33+
## Utilisation
34+
35+
### Créer un nouveau projet
36+
37+
```sh
38+
indigo new <nom du projet>
39+
```
40+
41+
### Lancer le serveur local de développement
42+
43+
```sh
44+
cd <nom du projet>
45+
indigo run
46+
```
47+
48+
### Lancer le build de production
49+
50+
```sh
51+
cd <nom du projet>
52+
indigo build
53+
```
54+
55+
### Gérer les conteneurs docker d'un projet
56+
57+
```sh
58+
cd <nom du projet>
59+
indigo docker <start|stop|install|uninstall>
60+
```
61+
62+
## Auteur
63+
64+
👤 **Théo Laubezout**
65+
66+
* Twitter: [@TheoLOFF](https://twitter.com/TheoLOFF)
67+
* Github: [@laubezout-theo](https://github.com/laubezout-theo)
68+
69+
## 🤝 Contribuer
70+
71+
Les contributions, issues et demandes de fonctionnalités sont les bienvenus ! <br /> N'hésitez pas à consulter la page des [issues](https://github.com/Tidle-Groupe/indigo/issues). Vous pouvez également consulter le [guide de contribution](https://github.com/Tidle-Groupe/indigo/blob/master/CONTRIBUTING.md). <br /> Si vous souhaitez suivre l'avancement du projet, une roadmap est disponible [ici](https://trello.com/b/imtsTQsB).
72+
73+
## Montrez votre soutien
74+
75+
Donnez une ⭐️ si ce projet vous a aidé!
76+
77+
***
78+
Ce projet est sous license [GPL-3.0](https://github.com/Tidle-Groupe/indigo/blob/master/LICENSE).

‎SECURITY.md

Lines changed: 78 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,78 @@
1+
# Politique de sécurité
2+
3+
## Versions prises en charge
4+
5+
| Version | Prise en charge |
6+
| -------- | ------------------ |
7+
| 1.0.x | :white_check_mark: |
8+
| =< 0.2.1 | :x: |
9+
10+
## Signaler une vulnérabilité
11+
12+
** Veuillez ne pas signaler les vulnérabilités de sécurité via des issues GitHub publics. **
13+
14+
Veuillez plutôt les signaler en envoyant un e-mail à [contact@tidle.fr](mailto:contact@tidle.fr). Si possible, chiffrez votre message avec notre clé PGP publique dédiée, ci-dessous.
15+
16+
Si pour une raison quelconque vous ne recevez pas de réponse, veuillez faire un suivi par e-mail pour vous assurer que nous avons bien reçu votre message d'origine.
17+
18+
Veuillez inclure les informations demandées énumérées ci-dessous (autant que vous pouvez en fournir) pour nous aider à mieux comprendre la nature et la portée du problème éventuel :
19+
20+
* Type de problème (par exemple, débordement de tampon, injection SQL, script intersite, etc.).
21+
* Chemins complets du ou des fichiers source liés à la manifestation du problème.
22+
* L'emplacement du code sources concerné (tag / branche / commit ou URL directe).
23+
* Toute configuration spéciale requise pour reproduire le problème.
24+
* Instructions étape par étape pour reproduire le problème.
25+
* Preuve de concept ou code d'exploitation (si possible).
26+
* Impact du problème, y compris comment un attaquant pourrait exploiter le problème.
27+
28+
## Clé PGP publique :
29+
```
30+
-----BEGIN PGP PUBLIC KEY BLOCK-----
31+
Comment: ID utilisateur: Chiffrements report sécurité Tidle <contact@tidle.fr>
32+
Comment: Créé: 24/11/2020 23:26
33+
Comment: Expire: 24/11/2022 12:00
34+
Comment: Type: 3 072-bit RSA (certificat secret disponible)
35+
Comment: Utilisation: Signature, Chiffrement, Certification des identifiants utilisateur
36+
Comment: Empreinte: F69287E007E1D6EE8FFE89F80BEE38E8E2F5B1C7
37+
38+
39+
mQGNBF+9iJoBDADInf7VEn0VO18Mo4k/9F1mJOGDx4D7qfX2DxbRGlE6OTn6YT7G
40+
xKPtfsp8ukqaGK+k1rzP3qCZtPOHdVxR4wj9YrfrZEiuCwdAX1kIbV7RziA+mqjN
41+
U+kaH2H8W2bbw3NzWTHe+UeozIeIcDP02cJwfXHQUKbvUyWcTNEdSl/0Dzhguh0n
42+
r0MvJ0gVvxfMeFv66I8/PQC6MIIinDWx7LpQc9lJHMbslchJx1odKs1X7uhhQPuN
43+
FzPmdKpQeRVsZamnrAZNkfsHKb6+dAHlhHuLfi1q+HZfa5YYG+3gLT+CpRuOt8ZQ
44+
CQy7T001AqbhCWwDahScx52ftTD5UgoEQ+tFG0SFQKN/fJzBsXvf5PG9duEnMawF
45+
EBcjcKWFAWwzm4PYYTh3a2KgnIjqWry7+MclbREypDrAvG6/+rQRvFbEgGLYIlAA
46+
b8uo4S2LCUIXAL4gBKQfRvXmbzTA+Pq39ie1DCPhRupDM9aDk2/cEtKmoyHAl2p8
47+
9LI0tAMj7ceTXusAEQEAAbQ3Q2hpZmZyZW1lbnRzIHJlcG9ydCBzw6ljdXJpdMOp
48+
IFRpZGxlIDxjb250YWN0QHRpZGxlLmZyPokB1AQTAQgAPhYhBPaSh+AH4dbuj/6J
49+
+AvuOOji9bHHBQJfvYiaAhsDBQkDwcYWBQsJCAcCBhUKCQgLAgQWAgMBAh4BAheA
50+
AAoJEAvuOOji9bHHXwoL/2Oqv5CSCvenpJptzw3uDu1AvsgOO80HrNDW9lI+A9N+
51+
OforacQN8q0RLznhqXqutxzv7HK0Nbyo+X3zCeWJh23czs5sUbgmqgbO6gDqzU2j
52+
5UsBaXN4d/Xr2J7yJX5XCCGLqe/Za807362ZgqzbZnTYLVzJeRLRcJWgTXMIWgQu
53+
hhN22uD4ywhTgsmYTGZc3lKN+QYqBedx2CBnuienfDQUdxDcAWKJpPPf2LMQ1Uf5
54+
qwH2QNxrsHCUni/kTVkXwQU56wLVK3lKwFKW/qSQREoYAviu4wmrUVdHTEcfUlW1
55+
UhZcnFI+ix/mhThFH//BqLezurf7qkwp1UNpGTvMArPgwUw/+7Q8yA6SsfSQw1iY
56+
xG9g4w6cuggWv+kIrdV3GOcwHH7rGhT4FymVt1rQBl9MUuWJTINW2epBQpdPt/OT
57+
GJzLZDFuEP5o/lK7uNfphRlhWZltIXJ4suEOTj3m5Cp2U+zMgD859Hb58Wdxp3GR
58+
Rl6v9GAfX20u67/c7ROXy7kBjQRfvYiaAQwA2gkCVx31GjQZHHKkkyVeBtW/3l9N
59+
0VRkQcCUTnFYnD34RKU2ukoPMh+AHR6bMxF/N63ixCv9iH0JUv5SZT+FWc3OlrVy
60+
KnOUYDabj1JIfGsGH7ZKIt8O3rc35SVBHmtJzm7vzjvie4vz8oIGvYSN5GMsqOU2
61+
c2mL9LRBCyD3uRHLNPGkezNSl9as2E/NmBP/NIwA3tm1GoT4k2lN1CUyVTmxftIB
62+
cvQhQS8nChwdNcibRHcg/vd5QyJUOMnMO+ufT2N1hHNnz+E/ikPPQTH9LYoDzYsQ
63+
3sa1QV1YzWvW/nqhXxPHZRg9SlhMlaYEH/psmUwH3KlmGLn3aCWfYcKn4I7n6m2E
64+
0f+C99BQdo3T84sdpcV58hD7hilN5PQe8pgWapS+hxcEz3axSadI6ARdovmYQgU2
65+
UxE0JVZS7+0zuY111IPO4OB8WjZwmMWWROXCsHOVmIIoBOwIL5DpXE40EFub1qFg
66+
JiMOuMP/huQPMOKj0DP+wal0b2J6j7bYQ313ABEBAAGJAbwEGAEIACYWIQT2kofg
67+
B+HW7o/+ifgL7jjo4vWxxwUCX72ImgIbDAUJA8HGFgAKCRAL7jjo4vWxx1DAC/4k
68+
om4rpV7U93b7bnMbrOwD5jlcTDmZbrBYxt5+5tjEIMvAS4IXIhFIXNTyf74r2hLM
69+
9pGVOFCohHAgEw1zZlw9kgcWD6ctzd+XapE2Y1mjA81lIU0XJEOvWFkRdqWERRf7
70+
0R1U1agEDQMGaGqQLO3iC194tsiNmqqzhbrefS7qJV16NGQ4oHIl4xUeJEpysD31
71+
7nBBHBhjdfOHVcW8UhTF1iOexRQEOTGpDu2wpi7EbUiW7obvg7XRTwYqEtkHZKqP
72+
4hCTFlIA55WeVkckiTyAUKN3gNrWT9Ny5JIsR4DRWUdQDTG7VyN8QCKeXt1qTmdT
73+
C1j+pi2tIB/x8EYASCvuwMDGnVXmipfzSxaELXz3V4L/yfjqwUJBRkXQsNwPyogw
74+
erblLu4cI9fNBRnV8a+hM0horw5T6qsgrj5Ilu3Z6TlVVF9ADG2Pr6yKSNjNTO3V
75+
+zSfwNpy6kMCNLYDC/iRLbz10uGALaYipEWIbKIx8MfkbINGMWQKW2Pbt7TdoR4=
76+
=54EQ
77+
-----END PGP PUBLIC KEY BLOCK-----
78+
```

‎bin/indigo

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
#!/usr/bin/env node
2+
require('../cmd/index.js');

0 commit comments

Comments
 (0)