GitLab

Change-Id: Ice7406f43966dda6359e4e3e8d4a6cecb4cc7a6b

Change-Id: I20e165e6bd0c9e5ea59043bc6b86eacbcda0f996

A python script for auditing Wikimedia deployers

Bug: T237696
Change-Id: I1660d33c3e15cd28cbbc8e54ae53edebfb06fcb9

- Added color support for grep matches
- Improved php function matching regexp

Bug: T221477
Change-Id: Ia9f272c83f8a938b9e76aa4d936fea58bf1cc55d

Some bash scripts which install, run and manage reports for various
security-focused tools for the PHP programming language.  See also
README.md.

Bug: T221477
Change-Id: Ib453a49deebd3d66c4cb7af9dbccd26319ebfdef

- a few minor Markdown formatting changes

Change-Id: I44706bdc914aafb816b343d68c91f787dac84bd3

- cleaned up some whitespace issues
- enhanced Usage section

Change-Id: I75f6681c8c1cb0d411844c116e2290bddee7b89d

Change-Id: Id4e6fb1f2a8d41c25e3eb645a59033682562d45f

Add extended regexp flag to grep call

Bug: T218743
Change-Id: Ide931a124ad757f7d0fb9df389baabe539470897

* Updated UserTracker README to reflect correct tool title
* Updated GitMonitor sendmail command with to/from in body for
more reliable delivery

Change-Id: I8bd10f0a6d6419631f1a9cde939f0a5e7c579801

* Fixing obnoxious header issues in README

Change-Id: I554b40db318664dd6f5a98c5aa39f467204c3184

* Added README.md
* Added .gitignore

Change-Id: Ifac6f85fa48fb150cb3778e0d12c5ece8ba03070

* Fixed git bug for detached head/branchless repos
* Added .gitignore with GM_env* config pattern
* Added a couple of notes to README.md

Bug: T218743
Change-Id: Ia762eb66a86ffbc3bdbb3454838e85d0d0bb4335

A security tool to monitor recent changes to a git repository via
git log and match patterns for potentially dangerous commits

Bug: T218743
Change-Id: I30e3c372264fa3f5f324a60ccce9b0136a22e075

Fix reported issues:

./bin/getwikirights.py

7:1: F401 'getpass' imported but unused
11:1: E302 expected 2 blank lines, found 1
23:16: E222 multiple spaces after operator
25:5: F841 local variable 'wap' is assigned to but never used
32:1: E305 expected 2 blank lines after class or function definition,
      found 1

There is a very long string for an URL, ignores it with 'noqa'. The code
should be refactored to pass a dict to requests.get.

./usertracker/UserTracker.py

12:1: F401 'sys' imported but unused
100:13: F841 local variable 'all_post_data' is assigned to but never used
274:37: E117 over-indented

Bug: T216801
Change-Id: I9e5bdccdb9d5d2f36d671d06eade37384bcd8ba5

Implemented PhabricatorTracker, minimally.  For now it queries
api/maniphest.search and finds task activity after a certain timestamp for a
specific Phabricator user.  I would eventually like to check a few more Phab
API endpoints and better handle Phab's API limit (100 results) with paging
(noted as TODOs.)

Bug: T212508
Change-Id: Id2b6787a72cb6e18acfe850efbca5fbf84952f78

UserTracker is some basic python tooling to monitor certain user activities
within various wikimedia systems (particulary gerrit and phabricator).  For
example, the GerritTracker subclass currently consumes a gerrit API endpoint,
analyzes the data and then emails a report to a mailing list or user, if
necessary.

Bug: T212508
Change-Id: Idcbdfac7f7544d57b4534fee062c46d243d1840c

Lots of room for improvement but want to share.

Change-Id: I02bf9f95ca63132de89e60958f28af4d40a1b565

Setting up wikimedia/security/tooling repository.

Adding files:

README.md
LICENSE
.gitreview

Bug: T213304
Change-Id: Iabb21111fda61cc5aef90018e6aad7961d4b0279