roche / the-ambassador Goto Github PK

Goal is to build Docker image and then push it to Dockerhub. Use bootBuildImage gradle step to build Docker image. Name should be just ambassador.

On master branch, build snapshot image, with tags:
- version (from Gradle)
- commit ID
- dev

Image should be built only when all tests are passing.

Image should be pushed to GitHub Container registry: https://ghcr.io

1. what is the project about, what is rationale etc
2. how to use, run and deploy it
3. how to build it, test
4. how to troubleshoot
5. how to contribute (how to create issue, PR, commit, what quality gates are expected)

Docs:

• readme
• contributing guide

Q: How to deal with linked documents or external documentation?

In order to run solution efficiently in terms of cost, resources usage and performance, it is preferred to split API for reading projects/groups indexed in DB (an explorer), from the indexer itself. This would allow:

• separate scaling of API and indexer (which requires more resources, but runs less often)
• lowering costs of the infrastructure, by running indexer on-demand only when it is needed
• running API uninterrupted while indexer is running

Challenges:

• how to start indexer by API? Should it be moved or API should trigger indexer?
• if indexer servers its own API, then how to run a gateway to serve API from single service?

Add calculation of security scorecard: https://github.com/ossf/scorecard

Describe the bug
Getting 401 when trying to access an image when not logged into the SCM (GItlab)

Reproduction steps
Steps to reproduce the behavior:

• Clear Cookies
• Try to access any project avatar url

Expected behavior
The Ambassador should mirror the images or return a base64

Configure:

• sonarcloud (separate action)
• gitguardian (separate action)
• detekt (part of CI tests)
• commit linter (separate action) to follow conventional commits

Do you remember headhunter.roche.com? It was a good tool for finding people who have experience with some specific technology, by scanning Bitbucket and Jira for commits and contributions to projects. Maybe it would be a low-hanging fruit to do the same for Ambassador?

Allow to unsubscribe by either:

• adding topic to repo
• adding file to repo
• sth else?

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• fix(deps): update dependency org.flywaydb:flyway-core to v8.5.13
• fix(deps): update flexmarkversion to v0.64.8 (com.vladsch.flexmark:flexmark-util-visitor, com.vladsch.flexmark:flexmark-util-options, com.vladsch.flexmark:flexmark-util-misc, com.vladsch.flexmark:flexmark-util-format, com.vladsch.flexmark:flexmark-util-data, com.vladsch.flexmark:flexmark-util-collection, com.vladsch.flexmark:flexmark-util-ast, com.vladsch.flexmark:flexmark-ext-youtube-embedded, com.vladsch.flexmark:flexmark-ext-yaml-front-matter, com.vladsch.flexmark:flexmark-ext-wikilink, com.vladsch.flexmark:flexmark-ext-typographic, com.vladsch.flexmark:flexmark-ext-toc, com.vladsch.flexmark:flexmark-ext-tables, com.vladsch.flexmark:flexmark-ext-superscript, com.vladsch.flexmark:flexmark-ext-ins, com.vladsch.flexmark:flexmark-ext-media-tags, com.vladsch.flexmark:flexmark-ext-gfm-tasklist, com.vladsch.flexmark:flexmark-ext-gfm-strikethrough, com.vladsch.flexmark:flexmark-ext-footnotes, com.vladsch.flexmark:flexmark-ext-escaped-character, com.vladsch.flexmark:flexmark-ext-enumerated-reference, com.vladsch.flexmark:flexmark-ext-emoji, com.vladsch.flexmark:flexmark-ext-definition, com.vladsch.flexmark:flexmark-ext-autolink, com.vladsch.flexmark:flexmark-ext-attributes, com.vladsch.flexmark:flexmark-ext-aside, com.vladsch.flexmark:flexmark-ext-anchorlink, com.vladsch.flexmark:flexmark-ext-admonition, com.vladsch.flexmark:flexmark-ext-abbreviation, com.vladsch.flexmark:flexmark)
• chore(deps): update aevea/commitsar action to v0.20.2
• chore(deps): update dependency gradle to v7.6.4
• chore(deps): update helm/chart-testing-action action to v2.6.1
• chore(deps): update helm/kind-action action to v1.10.0
• chore(deps): update plugin org.jetbrains.kotlin.plugin.jpa to v1.9.24
• fix(deps): update dependency com.github.jknack:handlebars-helpers to v4.4.0
• fix(deps): update dependency com.vladmihalcea:hibernate-types-52 to v2.21.1
• fix(deps): update dependency io.gitlab.arturbosch.detekt:detekt-formatting to v1.23.6
• fix(deps): update dependency io.gitlab.arturbosch.detekt:detekt-gradle-plugin to v1.23.6
• fix(deps): update dependency net.ttddyy:datasource-proxy to v1.10
• fix(deps): update dependency org.assertj:assertj-core to v3.25.3
• fix(deps): update dependency org.junit.jupiter:junit-jupiter to v5.10.2
• fix(deps): update dependency org.postgresql:postgresql to v42.7.3
• fix(deps): update dependency org.springframework.boot:spring-boot-gradle-plugin to v2.7.18
• fix(deps): update dependency org.testcontainers:postgresql to v1.19.8
• fix(deps): update jacksonversion to v2.17.1 (com.fasterxml.jackson.module:jackson-module-kotlin, com.fasterxml.jackson.datatype:jackson-datatype-jdk8, com.fasterxml.jackson.datatype:jackson-datatype-jsr310, com.fasterxml.jackson.core:jackson-annotations)
• fix(deps): update shedlock monorepo to v4.47.0 (net.javacrumbs.shedlock:shedlock-provider-jdbc-template, net.javacrumbs.shedlock:shedlock-spring)
• chore(deps): update actions/checkout action to v4
• chore(deps): update actions/setup-java action to v4
• chore(deps): update actions/setup-python action to v5
• chore(deps): update actions/stale action to v9
• chore(deps): update azure/setup-helm action to v4
• chore(deps): update dependency gradle to v8
• chore(deps): update docker/login-action action to v3
• chore(deps): update docker/metadata-action action to v5
• chore(deps): update github/codeql-action action to v3
• chore(deps): update helm release postgresql to v15
• chore(deps): update mcr.microsoft.com/devcontainers/java docker tag to v1
• chore(deps): update postgres docker tag to v16
• fix(deps): update dependency com.tngtech.archunit:archunit-junit5 to v1
• fix(deps): update dependency io.github.filipowm:spring-api-starter to v2
• fix(deps): update dependency org.flywaydb:flyway-core to v10
• fix(deps): update dependency org.slf4j:slf4j-api to v2
• fix(deps): update dependency org.springframework.boot:spring-boot-gradle-plugin to v3
• fix(deps): update ktorversion to v2 (major) (io.ktor:ktor-client-auth, io.ktor:ktor-client-logging, io.ktor:ktor-client-jackson, io.ktor:ktor-client-cio, io.ktor:ktor-client-core)
• fix(deps): update resilience4j to v2 (major) (io.github.resilience4j:resilience4j-kotlin, io.github.resilience4j:resilience4j-retry, io.github.resilience4j:resilience4j-circuitbreaker)
• fix(deps): update shedlock monorepo to v5 (major) (net.javacrumbs.shedlock:shedlock-provider-jdbc-template, net.javacrumbs.shedlock:shedlock-spring)
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update hugo19941994/delete-draft-releases action to v1.0.1
• fix(deps): update ktorversion to v1.6.8 (io.ktor:ktor-client-auth, io.ktor:ktor-client-logging, io.ktor:ktor-client-jackson, io.ktor:ktor-client-cio, io.ktor:ktor-client-core)
• chore(deps): update helm/chart-releaser-action action to v1.6.0
• fix(deps): update dependency com.github.jknack:handlebars to v4.4.0
• fix(deps): update dependency io.mockk:mockk to v1.13.10
• fix(deps): update dependency org.jetbrains.dokka:dokka-gradle-plugin to v1.9.20
• fix(deps): update dependency org.jooq:jooq-codegen to v3.19.8
• fix(deps): update jooqversion to v3.19.8 (org.jooq:jooq-meta-extensions-hibernate, org.jooq:jooq)
• fix(deps): update kotlincoroutinesversion to v1.8.0 (org.jetbrains.kotlinx:kotlinx-coroutines-core, org.jetbrains.kotlinx:kotlinx-coroutines-reactor)
• fix(deps): update springdocversion to v1.8.0 (org.springdoc:springdoc-openapi-security, org.springdoc:springdoc-openapi-kotlin, org.springdoc:springdoc-openapi-webflux-ui)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

• Check this box to trigger a request for Renovate to run again on this repository

It should be possible to provide a list of topics, that are preferred, together with it's synonyms / abbreviations.

Example configuration:

ambassador:
  topics:
    preferred:
      - value: topicX
        synonyms:
          - tx
          - topic-x
          - fantasticTopic

Application must verify for any duplicates in whole set of topics -- values and synonyms, and fail as needed.

Is your feature request related to a problem? Please describe.
Currently, we can not sort project by hotness so there is a healthy mix of top projects

Describe the solution you'd like

• Calculate a score from lastUpdated & score
• Consider using the following formula:
  https://hackernoon.com/from-reddits-hot-ranking-algorithm-to-my-satisfying-blend-or-top-ranked-and-new-by2h35tm

Describe alternatives you've considered
Or using a fresh pop formula:

Reference: https://docs.gitlab.com/ee/api/graphql/

After project is scored, static badge with score should be added. Use https://shields.io/ to generate it.

Default badge labels:

• activity for activity score
• criticality for criticality score
• security for security score
• ambassador-score for total score

Default style: flat

Color coding based on percentage of max possible score:

• >= 80% -> green
• >= 40% -> orange
• else -> red

Badge link should redirect to API endpoint (for now) containing detailed project information /projects/{id}.

It should be configurable:

• if badges are enabled
• if total score badge should be used
• if score-specific badge should be used (separate badges for each score)
• badges labels
• badges colors (color ranges based on score value)
• badges style

https://neo4j.com/docs/graph-data-science/current/algorithms/page-rank/