Azure Cloud Testing (Sophy) scg

.all-contributorsrc

@@ -0,0 +1,97 @@
+{
+  "projectName": "AzureHound",
+  "projectOwner": "BloodHoundAD",
+  "repoType": "github",
+  "repoHost": "https://github.com",
+  "files": [
+    "CONTRIBUTORS.md"
+  ],
+  "imageSize": 100,
+  "commit": true,
+  "commitConvention": "none",
+  "contributors": [
+    {
+      "login": "andyrobbins",
+      "name": "Andy Robbins",
+      "avatar_url": "https://avatars.githubusercontent.com/u/842644?v=4",
+      "profile": "https://www.twitter.com/_wald0",
+      "contributions": [
+        "ideas",
+        "design",
+        "blog",
+        "content",
+        "doc"
+      ]
+    },
+    {
+      "login": "ddlees",
+      "name": "Dillon Lees",
+      "avatar_url": "https://avatars.githubusercontent.com/u/8984872?v=4",
+      "profile": "https://github.com/ddlees",
+      "contributions": [
+        "code",
+        "maintenance",
+        "ideas",
+        "design"
+      ]
+    },
+    {
+      "login": "rvazarkar",
+      "name": "Rohan Vazarkar",
+      "avatar_url": "https://avatars.githubusercontent.com/u/5720446?v=4",
+      "profile": "https://blog.cptjesus.com/",
+      "contributions": [
+        "code",
+        "maintenance"
+      ]
+    },
+    {
+      "login": "urangel",
+      "name": "Ulises Rangel",
+      "avatar_url": "https://avatars.githubusercontent.com/u/16910931?v=4",
+      "profile": "https://ulises.io/",
+      "contributions": [
+        "code",
+        "maintenance"
+      ]
+    },
+    {
+      "login": "joshgantt",
+      "name": "joshgantt",
+      "avatar_url": "https://avatars.githubusercontent.com/u/29784250?v=4",
+      "profile": "https://github.com/joshgantt",
+      "contributions": [
+        "code",
+        "maintenance"
+      ]
+    },
+    {
+      "login": "hugo-syn",
+      "name": "hugo-syn",
+      "avatar_url": "https://avatars.githubusercontent.com/u/61210734?v=4",
+      "profile": "https://github.com/hugo-syn",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "crimike",
+      "name": "crimike",
+      "avatar_url": "https://avatars.githubusercontent.com/u/10261812?v=4",
+      "profile": "https://github.com/crimike",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "0xffhh",
+      "name": "0xffhh",
+      "avatar_url": "https://avatars.githubusercontent.com/u/56194755?v=4",
+      "profile": "https://github.com/0xffhh",
+      "contributions": [
+        "code"
+      ]
+    }
+  ],
+  "contributorsPerLine": 7
+}

.dockerignore

@@ -0,0 +1,2 @@
+logs
+*.log

.github/workflows/build.yml

@@ -0,0 +1,112 @@
+name: Build
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        shell: bash
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Setup Go
+        uses: actions/setup-go@v3
+        with:
+          go-version-file: go.mod
+          check-latest: true
+          cache: true
+
+      - name: Test
+        run: go test ./...
+
+  containerize:
+    runs-on: ubuntu-latest
+    permissions:
+      packages: write
+    defaults:
+      run:
+        shell: bash
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Log in to the Container registry
+        uses: docker/login-action@f054a8b539a109f9f41c372932f1ae047eff08c9
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@98669ae865ea3cffbcbaa878cf57c20bbf1c6c38
+        with:
+          images: ghcr.io/bloodhoundad/azurehound
+          tags: |
+            type=edge,branch=main
+
+      - name: Build Container Image
+        uses: docker/build-push-action@v3
+        with:
+          context: .
+          build-args: VERSION=v0.0.0-rolling+${{ github.sha }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          push: ${{ ! startsWith(github.event_name, 'pull_request') }}
+
+  build:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        shell: bash
+    strategy:
+      matrix:
+        os:
+          - darwin
+          - linux
+          - windows
+        arch:
+          - amd64
+          - arm64
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Setup Go
+        uses: actions/setup-go@v3
+        with:
+          go-version-file: go.mod
+          check-latest: true
+          cache: true
+
+      - name: Build
+        run: 'go build -ldflags="-s -w -X github.com/bloodhoundad/azurehound/v2/constants.Version=v0.0.0-rolling+${{ github.sha }}"'
+        env:
+          GOOS: ${{ matrix.os }}
+          GOARCH: ${{ matrix.arch }}
+
+      - name: Zip
+        if: "! startsWith(github.event_name, 'pull_request')"
+        run: 7z a -tzip -mx9 azurehound-${{ matrix.os }}-${{ matrix.arch }}.zip azurehound*
+
+      - name: Compute Checksum
+        if: "! startsWith(github.event_name, 'pull_request')"
+        run: sha256sum azurehound-${{ matrix.os }}-${{ matrix.arch }}.zip > azurehound-${{ matrix.os }}-${{ matrix.arch }}.zip.sha256
+
+      - name: Update Rolling Release
+        if: "! startsWith(github.event_name, 'pull_request')"
+        uses: softprops/action-gh-release@v1
+        with:
+          name: Rolling Release (unstable)
+          tag_name: rolling
+          prerelease: true
+          files: |
+            azurehound-${{ matrix.os }}-${{ matrix.arch }}.zip
+            azurehound-${{ matrix.os }}-${{ matrix.arch }}.zip.sha256
+          body: |
+            Rolling release of AzureHound compiled from source (${{ github.sha }})
+            This is automatically kept up-to-date with the `${{ github.ref_name }}` ${{ github.ref_type }}

.github/workflows/cla.yml

@@ -0,0 +1,24 @@
+name: "CLA Assistant"
+on:
+  issue_comment:
+    types: [created]
+  pull_request_target:
+    types: [opened, closed, synchronize]
+
+jobs:
+  CLAssistant:
+    runs-on: ubuntu-latest
+    steps:
+      - name: "CLA Assistant"
+        if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target'
+        uses: contributor-assistant/github-action@v2.3.1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          PERSONAL_ACCESS_TOKEN: ${{ secrets.REPO_SCOPE }}
+        with:
+          path-to-signatures: "signatures.json"
+          path-to-document: "https://github.com/BloodHoundAD/CLA/blob/main/ICLA.md"
+          branch: "main"
+          remote-organization-name: BloodHoundAD
+          remote-repository-name: CLA
+          allowlist: dependabot[bot]

.github/workflows/publish.yml

@@ -0,0 +1,85 @@
+name: Publish
+
+on:
+  push: 
+    tags:
+      - "v*.*.*"
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        shell: bash
+    strategy:
+      matrix:
+        os:
+          - darwin
+          - linux
+          - windows
+        arch:
+          - amd64
+          - arm64
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Setup Go
+        uses: actions/setup-go@v3
+        with:
+          go-version-file: go.mod
+          check-latest: true
+          cache: true
+
+      - name: Build
+        run: 'go build -ldflags="-s -w -X github.com/bloodhoundad/azurehound/v2/constants.Version=${{ github.ref_name }}"'
+        env:
+          GOOS: ${{ matrix.os }}
+          GOARCH: ${{ matrix.arch }}
+
+      - name: Zip
+        run: 7z a -tzip -mx9 azurehound-${{ matrix.os }}-${{ matrix.arch }}.zip azurehound*
+
+      - name: Compute Checksum
+        run: sha256sum azurehound-${{ matrix.os }}-${{ matrix.arch }}.zip > azurehound-${{ matrix.os }}-${{ matrix.arch }}.zip.sha256
+
+      - name: Upload Release
+        uses: softprops/action-gh-release@v1
+        with:
+          files: |
+            azurehound-${{ matrix.os }}-${{ matrix.arch }}.zip
+            azurehound-${{ matrix.os }}-${{ matrix.arch }}.zip.sha256
+
+  containerize:
+    runs-on: ubuntu-latest
+    permissions:
+      packages: write
+    defaults:
+      run:
+        shell: bash
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Log in to the Container registry
+        uses: docker/login-action@f054a8b539a109f9f41c372932f1ae047eff08c9
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@98669ae865ea3cffbcbaa878cf57c20bbf1c6c38
+        with:
+          images: ghcr.io/bloodhoundad/azurehound
+          tags: |
+            type=semver,pattern={{version}},prefix=v
+            type=semver,pattern={{major}}.{{minor}},prefix=v
+
+      - name: Build Container Image
+        uses: docker/build-push-action@v3
+        with:
+          context: .
+          build-args: VERSION=${{ github.ref_name }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          push: true