Travis CI testing a Dockerfile based on Palantir's remix of Apache Cassandra, testing IaC, and testing integration health of Debian

Montana Mendy

Last update: Dec 20, 2021

Related tags

DevOps Tools snyk-palantir-cassandra

Overview

Testing Palantir's remix of Apache Cassandra with Snyk & Travis CI

This repository is to show Travis CI testing a Dockerfile based on Palantir's remix of Apache Cassandra, testing IaC's (Terraform, Kubernetes), and testing the integration health of Debian.

Usage

So we hade to define in the .travis.yml file the language as node, ultimately at first I had it set as python, but thought of a crafty work around, in which we would be using pipenv and if need be, pipenv graph via we have to grab Snyk and to do that we need to use npm. We then grab pipenv, here is a minified version of the .travis.yml I've created for this project, that doesn't have my regex expressions, and branching conditionals:

install:
  - pip install pipenv
language: node_js
node_js:
  - lts/*
script:
  - npm install -g snyk@latest # Globally install Snyk via node package manager, using condition `@latest` for latest version.
  - snyk -v # Print out the current version of Snyk symlinked. 
  - snyk code
  - snyk test --docker debian --file=Dockerfile --exclude-base-image-vulns # Scan the Palantir Cassandra container. 
  - snyk iac test variable.tf # Test an IaC method, say in this case Terraform. With simple variables that really equal to moot.
  - snyk iac test Kubernetes.yaml  # Test the Kubernetes.yaml file to see if there's any vuln's, this is defined to run on nginx.
  
# The rest of the .travis.yml in this repo, is my branching process. So if you look at the existing .travis.yml in this repo, and wonder why it's different, that's the reason. The above snippet will get you going.

It's important to note you'll need your Snyk env vars. I started this out language: python, then switched it to node to fetch Snyk, it's a quirky workaround, but works. I've also added cursory checks for Palantir's Apache Cassandra Dockerfile, to see if Snyk crashes when doing things in succession.

You might also like...

Iris is a highly configurable and flexible service for paging and messaging.

Iris Iris core, API, UI and sender service. For third-party integration support, see iris-relay, a stateless proxy designed to sit at the edge of a pr

715 Dec 28, 2022

Let's learn how to build, release and operate your containerized applications to Amazon ECS and AWS Fargate using AWS Copilot.

🚀 Welcome to AWS Copilot Workshop In this workshop, you'll learn how to build, release and operate your containerised applications to Amazon ECS and

15 Jul 14, 2022

KivyPassword - A password generator using both Kivy framework and SQL in order to create a local database for users to generate strong passwords and store them

KivyPassword A password generator using both Kivy framework and SQL in order t

1 Jan 14, 2022

pyinfra automates infrastructure super fast at massive scale. It can be used for ad-hoc command execution, service deployment, configuration management and more.

pyinfra automates/provisions/manages/deploys infrastructure super fast at massive scale. It can be used for ad-hoc command execution, service deployme

2.1k Dec 29, 2022

Software to automate the management and configuration of any infrastructure or application at scale. Get access to the Salt software package repository here:

Latest Salt Documentation Open an issue (bug report, feature request, etc.) Salt is the world’s fastest, most intelligent and scalable automation engi

12.9k Jan 4, 2023

Comments

Testing Debian like you did in your example, I get an "status EXIT 2"
Hey @Montana,

This example is very interesting for me, because these are some technologies we use at our company. My .travis.yml file fails when it gets to:

- snyk test --docker debian

here's a screenshot

could this be write permissions? thanks for your response.
opened by HillBillyHeist 5

Travis CI testing a Dockerfile based on Palantir's remix of Apache Cassandra, testing IaC, and testing integration health of Debian

Related tags

Overview

Testing Palantir's remix of Apache Cassandra with Snyk & Travis CI

Usage

You might also like...

Iris is a highly configurable and flexible service for paging and messaging.

Let's learn how to build, release and operate your containerized applications to Amazon ECS and AWS Fargate using AWS Copilot.

KivyPassword - A password generator using both Kivy framework and SQL in order to create a local database for users to generate strong passwords and store them

pyinfra automates infrastructure super fast at massive scale. It can be used for ad-hoc command execution, service deployment, configuration management and more.

Software to automate the management and configuration of any infrastructure or application at scale. Get access to the Salt software package repository here:

Simple, Pythonic remote execution and deployment.

Cross-platform lib for process and system monitoring in Python

This repository contains code examples and documentation for learning how applications can be developed with Kubernetes

Define and run multi-container applications with Docker

Comments

Testing Debian like you did in your example, I get an "status EXIT 2"

Owner

Montana Mendy

Apache Airflow - A platform to programmatically author, schedule, and monitor workflows

Rundeck / Grafana / Prometheus / Rundeck Exporter integration demo

A Habitica Integration with Github Workflows.

Cado Response Integration with Amazon GuardDuty using AWS Lambda

Helperpod - A CLI tool to run a Kubernetes utility pod with pre-installed tools that can be used for debugging/testing purposes inside a Kubernetes cluster

Honcho: a python clone of Foreman. For managing Procfile-based applications.

Django-Kubernetes - Learn how to deploy a docker-based Django application into a Kubernetes cluster into production on DigitalOcean

A tool to convert AWS EC2 instances back and forth between On-Demand and Spot billing models.