-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge branch 'main' into jamie.node-disable-instrumentations
- Loading branch information
Showing
252 changed files
with
2,138 additions
and
963 deletions.
There are no files selected for viewing
Validating CODEOWNERS rules …
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,79 @@ | ||
# This file is used to define the owners of the content modules in the OpenTelemetry repository. | ||
components: | ||
content-modules: | ||
- open-telemetry/docs-maintainers | ||
content-modules/opamp-spec: | ||
- open-telemetry/docs-maintainers | ||
- open-telemetry/opamp-spec-approvers | ||
content-modules/opentelemetry-proto: | ||
- open-telemetry/docs-maintainers | ||
- open-telemetry/specs-approvers | ||
content-modules/opentelemetry-specification: | ||
- open-telemetry/docs-maintainers | ||
- open-telemetry/specs-approvers | ||
content-modules/semantic-conventions: | ||
- open-telemetry/docs-maintainers | ||
- open-telemetry/specs-semconv-approvers | ||
content/en/blog: | ||
- open-telemetry/docs-maintainers | ||
content/en/community/end-user: | ||
- open-telemetry/sig-end-user-approvers | ||
content/en/docs/collector: | ||
- open-telemetry/collector-approvers | ||
content/en/docs/contributing: | ||
- open-telemetry/docs-maintainers | ||
content/en/docs/demo: | ||
- open-telemetry/demo-approvers | ||
content/en/docs/kubernetes/helm: | ||
- open-telemetry/helm-approvers | ||
content/en/docs/kubernetes/operator: | ||
- open-telemetry/operator-approvers | ||
content/en/docs/languages/cpp: | ||
- open-telemetry/cpp-approvers | ||
content/en/docs/languages/erlang: | ||
- open-telemetry/erlang-approvers | ||
content/en/docs/languages/go: | ||
- open-telemetry/go-approvers | ||
- open-telemetry/go-instrumentation-approvers | ||
content/en/docs/languages/java: | ||
- open-telemetry/java-approvers | ||
- open-telemetry/java-instrumentation-approvers | ||
content/en/docs/languages/js: | ||
- open-telemetry/javascript-approvers | ||
content/en/docs/languages/net: | ||
- open-telemetry/dotnet-approvers | ||
- open-telemetry/dotnet-instrumentation-approvers | ||
content/en/docs/languages/php: | ||
- open-telemetry/php-approvers | ||
content/en/docs/languages/python: | ||
- open-telemetry/python-approvers | ||
content/en/docs/languages/ruby: | ||
- open-telemetry/ruby-approvers | ||
- open-telemetry/ruby-contrib-approvers | ||
content/en/docs/languages/rust: | ||
- open-telemetry/rust-approvers | ||
content/en/docs/languages/swift: | ||
- open-telemetry/swift-approvers | ||
content/en/docs/security: | ||
- open-telemetry/sig-security-maintainers | ||
content/en/docs/specs: | ||
- open-telemetry/specs-approvers | ||
content/en/docs/zero-code/java: | ||
- open-telemetry/java-approvers | ||
- open-telemetry/java-instrumentation-approvers | ||
content/en/docs/zero-code/js: | ||
- open-telemetry/javascript-approvers | ||
content/en/docs/zero-code/net: | ||
- open-telemetry/dotnet-approvers | ||
- open-telemetry/dotnet-instrumentation-approvers | ||
content/en/ecosystem/demo: | ||
- open-telemetry/demo-approvers | ||
content/zh: | ||
- open-telemetry/docs-maintainers | ||
- open-telemetry/docs-zh-approvers | ||
content/ja: | ||
- open-telemetry/docs-maintainers | ||
- open-telemetry/docs-ja-approvers | ||
content/pt: | ||
- open-telemetry/docs-maintainers | ||
- open-telemetry/docs-pt-approvers |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,15 @@ | ||
name: Component owners | ||
on: | ||
pull_request_target: | ||
|
||
jobs: | ||
run_self: | ||
runs-on: ubuntu-latest | ||
name: Assign component owners | ||
permissions: | ||
contents: read | ||
pull-requests: write | ||
steps: | ||
- uses: dyladan/[email protected] | ||
with: | ||
config-file: .github/component-owners.yml |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,43 @@ | ||
--- | ||
title: OpenTelemetry Security Audit Published | ||
linkTitle: Security Audit Results | ||
date: 2024-07-22 | ||
author: '[Austin Parker](https://github.com/austinlparker)' | ||
issue: | ||
sig: GC | ||
--- | ||
|
||
Thousands of organizations and millions of users around the world rely on | ||
[OpenTelemetry](/) as part of their observability toolkit. To this end, it is | ||
our responsibility as a project to ensure our code is safe, secure, and | ||
performant. In conjunction with [OSTIF](https://ostif.org/) and | ||
[7ASecurity](https://7asecurity.com/), and the support of the | ||
[Cloud Native Computing Foundation](https://www.cncf.io/), we recently engaged | ||
upon a security audit of the OpenTelemetry Collector and four SDKs – Go, Java, | ||
C#, and Python. | ||
|
||
We are pleased to announce the publication of this audit, as well as its | ||
results. One CVE was identified and remediated prior to the publication of this | ||
audit (see [CVE-2024-36129](https://nvd.nist.gov/vuln/detail/CVE-2024-36129) for | ||
information) in the OpenTelemetry Collector, and five hardening recommendations | ||
were made. Overall, the results of the audit are very positive, with the | ||
auditors noting the high quality of source code and the security best practices | ||
that the project is following. | ||
|
||
The conclusion of this audit marks an important milestone on our journey towards | ||
the next stage of maturity in the CNCF, graduation. We’ll have more to share on | ||
that in the coming months. The OpenTelemetry Governance Committee and Security | ||
SIG would also like to personally commend the contributors and maintainers of | ||
OpenTelemetry for their high-quality work over the years. | ||
|
||
Finally, we would like to thank the following individuals and groups: | ||
|
||
- SIG Security | ||
- SIG Collector | ||
- 7ASecurity | ||
- OSTIF | ||
|
||
You can read more about the audit on the | ||
[OSTIF](https://www.ostif.org/otel-audit-complete/) and 7A Security blogs, or | ||
read the | ||
[full report](https://7asecurity.com/reports/pentest-report-opentelemetry.pdf). |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.