Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: upgrade package, improve dependabot and update docs #131

Merged
merged 3 commits into from
May 14, 2024
Merged

chore: upgrade package, improve dependabot and update docs #131

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
7ed4029
chore(npgsql): upgrade package
evegufy May 14, 2024
c13cfcc
chore(dependabot): add groups for version updates (#132)
evegufy May 14, 2024
d4a857c
docs: move and update security assessment
evegufy May 14, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,6 +33,11 @@ updates:
ignore:
- dependency-name: "*"
update-types: ["version-update:semver-major"]
groups:
production-dependencies:
dependency-type: "production"
development-dependencies:
dependency-type: "development"

# Github Actions
-
Expand All @@ -44,6 +49,11 @@ updates:
- "github-actions"
schedule:
interval: "weekly"
groups:
production-dependencies:
dependency-type: "production"
development-dependencies:
dependency-type: "development"

# Docker
-
Expand All @@ -58,3 +68,8 @@ updates:
ignore:
- dependency-name: "*"
update-types: ["version-update:semver-major"]
groups:
production-dependencies:
dependency-type: "production"
development-dependencies:
dependency-type: "development"
4 changes: 2 additions & 2 deletions DEPENDENCIES
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,8 +16,8 @@ nuget/nuget/-/Humanizer.Core/2.14.1, MIT, approved, #10060
nuget/nuget/-/Mono.TextTemplating/2.2.1, MIT, approved, clearlydefined
nuget/nuget/-/Newtonsoft.Json/13.0.1, MIT AND BSD-3-Clause, approved, #3266
nuget/nuget/-/Newtonsoft.Json/13.0.3, MIT AND BSD-3-Clause, approved, #3266
nuget/nuget/-/Npgsql.EntityFrameworkCore.PostgreSQL/8.0.2, PostgreSQL AND MIT, approved, #13972
nuget/nuget/-/Npgsql/8.0.2, PostgreSQL, approved, #13963
nuget/nuget/-/Npgsql.EntityFrameworkCore.PostgreSQL/8.0.4, PostgreSQL AND MIT, approved, #13972
nuget/nuget/-/Npgsql/8.0.3, PostgreSQL, approved, #13963
nuget/nuget/-/SSH.NET/2023.0.0, MIT AND (MIT AND MS-PL) AND ISC, approved, #13965
nuget/nuget/-/Serilog.AspNetCore/8.0.1, Apache-2.0 AND MIT, approved, #13967
nuget/nuget/-/Serilog.Enrichers.CorrelationId/3.0.1, MIT, approved, clearlydefined
Expand Down
15 changes: 7 additions & 8 deletions ...ical-documentation/Security_Assessment.md → ...ation/architecture/Security_Assessment.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,20 +10,19 @@

## Product Description

Policy-Hub project is an readonly REST API project, without implementation of an UI. (Pure Backend Component)
The Policy-Hub product is an readonly REST API project, without implementation of an UI. (Pure Backend Component)

Main purpose of the product is to provide interested and authenticated C-X Users with read access to policy data, use cases, credential types, policy rules, that are created during an application seeding.
The main purpose of the product is to provide interested and authenticated CX Users with read access to policy data, use cases, credential types, policy rules, which are created during an application seeding.

The Policy-Hub comprise the technical foundation for interaction, monitoring, auditing and further functionalities.
They are state of the art in terms of technology portfolio, consist of open-source components whenever possible and are open-sourced themselves 100%.
The Policy-Hub comprises the technical foundation for interaction, monitoring, auditing and further functionalities.

Policy-Hub can be run anywhere: it can be deployed as a docker image, e. g. on Kubernetes (platform-independent, cloud, on prem or local).
The product can be run anywhere: it can be deployed as a docker image, e. g. on Kubernetes (platform-independent, cloud, on prem or local).

The policy hub is using following key frameworks:

- .Net
- Entity Framework
[architecture & development concept](https://github.com/eclipse-tractusx/policy-hub/blob/main/docs/technical-documentation/architecture/Development%20Concept.md)
[Development Concept](./Development%20Concept.md)

## Data Flow Diagram

Expand All @@ -43,12 +42,12 @@ flowchart LR
CU
end

subgraph Policy-Hub Product
subgraph Policy-Hub Product
PH
PHD
end

K-->|"Authentication & Authorization Data \n (Using JWT)"|PH
K-->|"Authentication & Authorization Data \n (Using JWT)"|PH
CU-->|"Consumption of central, read-only REST API \n [HTTPS]"|PH
PH-->|"Read policies, use cases, \n credential types, policy rules"|PHD
CU-->|"IAM with OIDC \n [HTTPS]"|K
Expand Down
2 changes: 1 addition & 1 deletion src/database/PolicyHub.Entities/PolicyHub.Entities.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
<PrivateAssets>all</PrivateAssets>
</PackageReference>
<PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="8.0.2" />
<PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="8.0.3" />
</ItemGroup>
<ItemGroup>
<SonarQubeSetting Include="sonar.coverage.exclusions">
Expand Down
Loading