v5.2.0 by mlodic · Pull Request #1944 · intelowlproject/IntelOwl

mlodic · 2023-10-17T07:30:05Z

Checklist for creating a new release

(optional) If we changed/added Docker Analyzers, we need to configure Docker Hub / Dependabot properly.
Update CHANGELOG.md for the new version
Change version number in docs/source/schema.yml and docker/.env
Verify CI Tests
Create release for the branch develop. A Github action should automatically create a Twitter post.
Write the following statement there (change the version number):

please refer to the [Changelog](https://github.com/intelowlproject/IntelOwl/blob/develop/.github/CHANGELOG.md#v331)

WARNING: The release will be live within an hour!

Wait for dockerHub to finish the builds
Merge the PR to the master branch. Note: Only use "Merge and commit" as the merge strategy and not "Squash and merge". Using "Squash and merge" makes history between branches misaligned.
Remove the "wait" statement in the release description.

…r_organization enabled (#1827) * fixed multiline strings in capesandbox analyzer with plugin-config for_organization enabled * staticmethod * staticmethod

Signed-off-by: 0ssigeno <[email protected]>

Bumps [jsonschema](https://github.com/python-jsonschema/jsonschema) from 4.18.0 to 4.19.0. - [Release notes](https://github.com/python-jsonschema/jsonschema/releases) - [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst) - [Commits](python-jsonschema/jsonschema@v4.18.0...v4.19.0) --- updated-dependencies: - dependency-name: jsonschema dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: 0ssigeno <[email protected]>

* pass param via GET to the scan form page * prettier * log

Signed-off-by: 0ssigeno <[email protected]>

* add netlas python module * add mockresponse for netlas * modify the mockresponse to match the actual * add new migration for netlas * Fix migration Signed-off-by: 0ssigeno <[email protected]> * Fix response Signed-off-by: 0ssigeno <[email protected]> * Do not allow to dump real secret values Signed-off-by: 0ssigeno <[email protected]> * Do not allow to dump real secret values Signed-off-by: 0ssigeno <[email protected]> * Fix migration creation Signed-off-by: 0ssigeno <[email protected]> * Fix migration creation Signed-off-by: 0ssigeno <[email protected]> * add netlas to usage.md --------- Signed-off-by: 0ssigeno <[email protected]> Co-authored-by: 0ssigeno <[email protected]>

* added support admins pluginconfig managemnent #1470 * updated certego-saas pypi version * fixed permission check for enable/disable org * made the requested changes fixed admin queryset query and added tests fixed admin permissions checks added comments in tests source code * removed unused permissions class

Bumps [flag-icons](https://github.com/lipis/flag-icons) from 6.9.1 to 6.9.5. - [Release notes](https://github.com/lipis/flag-icons/releases) - [Changelog](https://github.com/lipis/flag-icons/blob/main/CHANGELOG.md) - [Commits](lipis/flag-icons@v6.9.1...v6.9.5) --- updated-dependencies: - dependency-name: flag-icons dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [jest-environment-jsdom](https://github.com/facebook/jest/tree/HEAD/packages/jest-environment-jsdom) from 29.6.1 to 29.6.2. - [Release notes](https://github.com/facebook/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/jest/commits/v29.6.2/packages/jest-environment-jsdom) --- updated-dependencies: - dependency-name: jest-environment-jsdom dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [prettier](https://github.com/prettier/prettier) from 3.0.0 to 3.0.2. - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.0.0...3.0.2) --- updated-dependencies: - dependency-name: prettier dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [formik](https://github.com/jaredpalmer/formik) from 2.4.2 to 2.4.3. - [Release notes](https://github.com/jaredpalmer/formik/releases) - [Commits](https://github.com/jaredpalmer/formik/compare/[email protected]@2.4.3) --- updated-dependencies: - dependency-name: formik dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Recent scans upgrade Signed-off-by: 0ssigeno <[email protected]> * More changes Signed-off-by: 0ssigeno <[email protected]> * Fix test Signed-off-by: 0ssigeno <[email protected]> --------- Signed-off-by: 0ssigeno <[email protected]>

status "processing" is no longer available

Bumps [uwsgi](https://github.com/unbit/uwsgi-docs) from 2.0.20 to 2.0.22. - [Commits](https://github.com/unbit/uwsgi-docs/commits) --- updated-dependencies: - dependency-name: uwsgi dependency-type: direct:production ... Signed-off-by: 0ssigeno <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: 0ssigeno <[email protected]> Co-authored-by: Matteo Lodi <[email protected]> Co-authored-by: Simone Berni <[email protected]> Co-authored-by: code-review-doctor[bot] <72320148+code-review-doctor[bot]@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: drosetti <[email protected]> Co-authored-by: Abheek Tripathy <[email protected]> Co-authored-by: AshirRashid <[email protected]> Co-authored-by: Karanjot Singh <[email protected]> Co-authored-by: 0ssigeno <[email protected]> Co-authored-by: Daniele Rosetti <[email protected]> Co-authored-by: Siddhanth <[email protected]> Co-authored-by: Parth Madan <[email protected]> Co-authored-by: Shivam Purohit <[email protected]> Co-authored-by: shivam <[email protected]> Co-authored-by: Martina Carella <[email protected]> Co-authored-by: ben-ce <[email protected]> Co-authored-by: Kyle Taylor <[email protected]> Co-authored-by: Aditya <[email protected]> Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>

Signed-off-by: 0ssigeno <[email protected]>

* feat: add guide skeleton with routes. * fix: content/styling for guide. * chore: fix prettier errors * fix: header guide link + eslint warnings * fix: authentication check on guide. * refactor: change state/set to guideState/set * Update frontend/src/components/misc/GuideWrapper.jsx Co-authored-by: Matteo Lodi <[email protected]> * Apply suggestions from code review Co-authored-by: Matteo Lodi <[email protected]> * chore: prettier errors * fix: dashboard step at the last --------- Co-authored-by: Matteo Lodi <[email protected]>

Signed-off-by: 0ssigeno <[email protected]>

Bumps [django-auth-ldap](https://github.com/django-auth-ldap/django-auth-ldap) from 4.4.0 to 4.5.0. - [Release notes](https://github.com/django-auth-ldap/django-auth-ldap/releases) - [Changelog](https://github.com/django-auth-ldap/django-auth-ldap/blob/master/docs/changes.rst) - [Commits](django-auth-ldap/django-auth-ldap@4.4.0...4.5.0) --- updated-dependencies: - dependency-name: django-auth-ldap dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [pycti](https://github.com/OpenCTI-Platform/client-python) from 5.9.0 to 5.10.0. - [Release notes](https://github.com/OpenCTI-Platform/client-python/releases) - [Commits](OpenCTI-Platform/client-python@5.9.0...5.10.0) --- updated-dependencies: - dependency-name: pycti dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [sphinx-rtd-theme](https://github.com/readthedocs/sphinx_rtd_theme) from 1.2.0 to 1.3.0. - [Changelog](https://github.com/readthedocs/sphinx_rtd_theme/blob/master/docs/changelog.rst) - [Commits](readthedocs/sphinx_rtd_theme@1.2.0...1.3.0) --- updated-dependencies: - dependency-name: sphinx-rtd-theme dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [gitpython](https://github.com/gitpython-developers/GitPython) from 3.1.30 to 3.1.32. - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@3.1.30...3.1.32) --- updated-dependencies: - dependency-name: gitpython dependency-type: direct:production ... Signed-off-by: 0ssigeno <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: 0ssigeno <[email protected]> Co-authored-by: Matteo Lodi <[email protected]> Co-authored-by: Simone Berni <[email protected]> Co-authored-by: code-review-doctor[bot] <72320148+code-review-doctor[bot]@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: drosetti <[email protected]> Co-authored-by: Abheek Tripathy <[email protected]> Co-authored-by: AshirRashid <[email protected]> Co-authored-by: Karanjot Singh <[email protected]> Co-authored-by: 0ssigeno <[email protected]> Co-authored-by: Daniele Rosetti <[email protected]> Co-authored-by: Siddhanth <[email protected]> Co-authored-by: Parth Madan <[email protected]> Co-authored-by: Shivam Purohit <[email protected]> Co-authored-by: shivam <[email protected]> Co-authored-by: Martina Carella <[email protected]> Co-authored-by: ben-ce <[email protected]> Co-authored-by: Kyle Taylor <[email protected]> Co-authored-by: Aditya <[email protected]> Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.2.0 to 2.3.0. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@08b4669...483ef80) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: 0ssigeno <[email protected]>

Bumps [pre-commit](https://github.com/pre-commit/pre-commit) from 3.4.0 to 3.5.0. - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v3.4.0...v3.5.0) --- updated-dependencies: - dependency-name: pre-commit dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Pivot serializer Signed-off-by: 0ssigeno <[email protected]> * Minor fixes Signed-off-by: 0ssigeno <[email protected]> * Minor fixes Signed-off-by: 0ssigeno <[email protected]> * Fixes Signed-off-by: 0ssigeno <[email protected]> * Fixes tests Signed-off-by: 0ssigeno <[email protected]> * Added corner case Signed-off-by: 0ssigeno <[email protected]> * Fixes Signed-off-by: 0ssigeno <[email protected]> --------- Signed-off-by: 0ssigeno <[email protected]>

…widget Signed-off-by: 0ssigeno <[email protected]>

Signed-off-by: 0ssigeno <[email protected]>

code-review-doctor

Worth considering. View full project report here.

code-review-doctor · 2023-10-25T10:31:42Z

api_app/analyzers_manager/observable_analyzers/dns/dns_malicious_detectors/google_webrisk.py

+        ):
+            raise AnalyzerRunException(
+                f"{self.observable_name} not supported "
+                f"because it does not start with http"


Suggested change

f"because it does not start with http"

"because it does not start with http"

f-string is unnecessary here. This can just be a string. Explained here.

* addded requests timeout + poll for result analysis timeout * added migration of requests_timeout parameter * formatted file * formatted file * formatted file * fixed timeout error * reformatted the file * reformatted the file * reformatted the file * added dynamic timeout polling * changed migration name and number dependency * fixed end of time error in case of mocked connections * Using range(len(...)) is not pythonic. * added pending state initial checks * reduced cyclomatic complexity

code-review-doctor

Worth considering. View full project report here.

code-review-doctor · 2023-10-25T12:36:59Z

api_app/analyzers_manager/file_analyzers/cape_sandbox.py

+        if tot_time > 600:
+            logger.warning(
+                f" Job: {self.job_id} -> "
+                f"Broken soft time limit!! "


Suggested change

f"Broken soft time limit!! "

"Broken soft time limit!! "

f-string is unnecessary here. This can just be a string. More.

* addded requests timeout + poll for result analysis timeout * added migration of requests_timeout parameter * formatted file * formatted file * formatted file * fixed timeout error * reformatted the file * reformatted the file * reformatted the file * added dynamic timeout polling * changed migration name and number dependency * fixed end of time error in case of mocked connections * Using range(len(...)) is not pythonic. * added pending state initial checks * reduced cyclomatic complexity * fixed while True in failed analysis * code-review-doctor

Signed-off-by: 0ssigeno <[email protected]>

* enable/disable playbook for org * fixed playbook options * prettier * changes * frontend tests * changes * fix

* refactor scan frontend * refactor frontend job package * huge fronted refactor * test improvements * rename API URLs file * splitted const into multiple files * rename const * moved mock file in frontend test * refactor const * refactor constants * refactor const * prettier

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3 to 4. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v3...v4) --- updated-dependencies: - dependency-name: actions/setup-node dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* improved documentation and refactor old information * adjusted rtd format

Signed-off-by: 0ssigeno <[email protected]>

Bumps [sphinxcontrib-openapi](https://github.com/sphinx-contrib/openapi) from 0.7.0 to 0.8.3. - [Changelog](https://github.com/sphinx-contrib/openapi/blob/master/CHANGES) - [Commits](sphinx-contrib/openapi@0.7.0...0.8.3) --- updated-dependencies: - dependency-name: sphinxcontrib-openapi dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* adjusted file scan analyzers to use TLP in smart way * removed VT v2 python code * fixed migration * Fix routing_key mgmt Signed-off-by: 0ssigeno <[email protected]> * Typo Signed-off-by: 0ssigeno <[email protected]> * Fix test Signed-off-by: 0ssigeno <[email protected]> --------- Signed-off-by: 0ssigeno <[email protected]> Co-authored-by: 0ssigeno <[email protected]>

* json viewer * changes * frontend test

* fixed frontend user menu django admin interface only for status members * added admin permissions in frontend * fixed view to remove user * fix test

federicofantini and others added 30 commits August 8, 2023 11:03

fixed multiline strings in capesandbox analyzer with plugin-config fo…

44b4eca

…r_organization enabled (#1827) * fixed multiline strings in capesandbox analyzer with plugin-config for_organization enabled * staticmethod * staticmethod

Fix serializer

cc54e77

Signed-off-by: 0ssigeno <[email protected]>

improved dehashed analyzer

a0fa401

Adding override for ingestor container

cc2680e

Signed-off-by: 0ssigeno <[email protected]>

pass param via GET to the scan form page (#1835)

1148e8b

* pass param via GET to the scan form page * prettier * log

fixed default scan param load playbook (#1836)

c5b0902

Do not allow to dump real secret values

f26d665

Signed-off-by: 0ssigeno <[email protected]>

Do not allow to dump real secret values

7f179e1

Signed-off-by: 0ssigeno <[email protected]>

Fix migration creation

981d60d

Signed-off-by: 0ssigeno <[email protected]>

Fix migration creation

c6b995c

Signed-off-by: 0ssigeno <[email protected]>

Upgrade recent scan (#1850)

07428e1

* Recent scans upgrade Signed-off-by: 0ssigeno <[email protected]> * More changes Signed-off-by: 0ssigeno <[email protected]> * Fix test Signed-off-by: 0ssigeno <[email protected]> --------- Signed-off-by: 0ssigeno <[email protected]>

fixed cape sandbox analyzer task status (#1851)

1b86478

status "processing" is no longer available

Fix

d99d630

Signed-off-by: 0ssigeno <[email protected]>

fixes (#1855)

f4383e9

Fix name

dfa64ce

Signed-off-by: 0ssigeno <[email protected]>

removed CryptoScam (#1856)

b1ee49c

adjusted some requirements

bd03f54

dependabot bot and others added 7 commits October 23, 2023 16:17

Fixed admin pages

dd5f220

Signed-off-by: 0ssigeno <[email protected]>

Refactor admin many_to_many to always use the FilteredSelectMultiple …

1f10bf8

…widget Signed-off-by: 0ssigeno <[email protected]>

Fix

7ab0442

Signed-off-by: 0ssigeno <[email protected]>

tweak to GoogleWebRisk analyzer

9ce2fd0

code-review-doctor bot suggested changes Oct 25, 2023

View reviewed changes

federicofantini and others added 19 commits October 25, 2023 16:13

VT force_active_scans depends on job tlp

514b15c

Signed-off-by: 0ssigeno <[email protected]>

Fix leaf node

3bf9889

Signed-off-by: 0ssigeno <[email protected]>

Fix condition

b9b3d59

Signed-off-by: 0ssigeno <[email protected]>

enable/disable playbook for org (#1965)

90903fd

* enable/disable playbook for org * fixed playbook options * prettier * changes * frontend tests * changes * fix

added changelong + bump 5.2.0 + changes in the doc

ce0316f

Doc improvs (#1971)

08b48d1

* improved documentation and refactor old information * adjusted rtd format

Fix pivot in case of error

64fc894

Signed-off-by: 0ssigeno <[email protected]>

frontend JSON viewer (#1974)

309b705

* json viewer * changes * frontend test

Fixes frontend permissions (#1975)

8d5df43

* fixed frontend user menu django admin interface only for status members * added admin permissions in frontend * fixed view to remove user * fix test

prettier

e77506c

trying mistune upgrade

c75492b

deepsource adjusts

b7e120e

suggestion deepsource: python

db2604c

fronted test adjust

5a719ac

mlodic merged commit baadf9d into master Nov 2, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

v5.2.0#1944

v5.2.0#1944
mlodic merged 223 commits intomasterfrom
develop

mlodic commented Oct 17, 2023 •

edited

Loading

Uh oh!

code-review-doctor bot left a comment

Uh oh!

code-review-doctor bot Oct 25, 2023

Uh oh!

code-review-doctor bot left a comment

Uh oh!

code-review-doctor bot Oct 25, 2023

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

	f"because it does not start with http"
	"because it does not start with http"

Uh oh!

Conversation

mlodic commented Oct 17, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Checklist for creating a new release

Uh oh!

code-review-doctor bot left a comment

Choose a reason for hiding this comment

Uh oh!

code-review-doctor bot Oct 25, 2023

Choose a reason for hiding this comment

Uh oh!

code-review-doctor bot left a comment

Choose a reason for hiding this comment

Uh oh!

code-review-doctor bot Oct 25, 2023

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

mlodic commented Oct 17, 2023 •

edited

Loading