Discover gists

How to add a collapsible section in markdown

Click me

OWASP#1 Insecure Workload Configurations
- Trivy checks - KSV001, KSV014, KSV017
OWASP#2 Supply Chain Vulnerabilities
- Manual - Image Integrity
- Manual - SBOM
- Manual - Image Signing
Manual - Image Composition

IaaS指提供系统（可以自己选）或者储存空间之类的硬件，软件要自己手动装；PaaS提供语言环境和框架（可以自己选）；SaaS只能使用开发好的软件（卖软件本身）；BaaS一般类似于非关系数据库，但各家不通用，有时还有一些其它东西。

This gist contains various scripts for scraping metrics. Mostly useful for processing the contents of Puppet Enterprise support bundles:

sar2influx.rb: A Ruby script that uses sadf to turn SAR archives into InfluxDB line format. For best results, run from a Linux VM using a recent operating system. Such as Ubuntu 22.04.
pdb2influx.sh: A bash script that uses awk and mlr to extract command processing times from puppetdb.log files.
top-api-calls.sh: Extracts the 10 most popular API calls from *-access.log along with their median and max duration grouped into 30 minute periods (Puppet $runinterval). Uses awk and mlr.

	# This code is licensed under the terms of the MIT license https://opensource.org/license/mit
	# Copyright (c) 2021 Marat Reymers

	## Golden config for golangci-lint v1.57.2
	#
	# This is the best config for golangci-lint based on my experience and opinion.
	# It is very strict, but not extremely strict.
	# Feel free to adapt and change it for your needs.

	run:

	--[[ lvim is the global options object Linters should be filled in as strings with either a global executable or a path to an executable
	]]

	-- require('swenv.api').get_current_venv()
	-- general
	lvim.log.level = "warn"
	lvim.format_on_save.enabled = true
	lvim.builtin.theme.name = "tokyonight"
	lvim.colorscheme = "onedark"
	lvim.builtin.terminal.size = 15

	# Block Torrent algo string using Boyer-Moore (bm)
	iptables -A FORWARD -m string --algo bm --string "BitTorrent" -j DROP
	iptables -A FORWARD -m string --algo bm --string "BitTorrent protocol" -j DROP
	iptables -A FORWARD -m string --algo bm --string "peer_id=" -j DROP
	iptables -A FORWARD -m string --algo bm --string ".torrent" -j DROP
	iptables -A FORWARD -m string --algo bm --string "announce.php?passkey=" -j DROP
	iptables -A FORWARD -m string --algo bm --string "torrent" -j DROP
	iptables -A FORWARD -m string --algo bm --string "announce" -j DROP
	iptables -A FORWARD -m string --algo bm --string "info_hash" -j DROP
	iptables -A FORWARD -m string --algo bm --string "/default.ida?" -j DROP

	#!/usr/bin/env zsh

	# List all bindkey mappings
	#
	# @see https://neg-serg.github.io/2017/03/zargs-howto/
	autoload -U zargs
	zargs -i{} $(bindkey -l) -- bindkey -L -M {}

	/*
	Example of how to get raw mouse input data using the native Windows API
	through a "message-only" window that outputs to an allocated console window.

	Not prepared for Unicode.
	I don't recommend copy/pasting this, understand it before integrating it.
	*/

	// Make Windows.h slightly less of a headache.
	#define NOMINMAX