Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
57 commits
Select commit Hold shift + click to select a range
bb7d9f0
add proxy interceptor
duncanista May 1, 2025
7ee6fb7
refactor proxy to accomodate LWA processing
duncanista May 2, 2025
a667b2e
remove `config` from proxy
duncanista May 5, 2025
241fcec
add `libddwaf` crate
duncanista Jun 2, 2025
6151c67
remove fallback on appsec
duncanista Jun 3, 2025
2d10b46
add appsec config methods
duncanista Jun 3, 2025
c7fb357
add config to proxy interceptor
duncanista Jun 3, 2025
cbcc2c6
add partial appsec processor
duncanista Jun 3, 2025
ba7a1da
fix dependencies
duncanista Jun 3, 2025
d229800
Merge origin/main into jordan.gonzalez/appsec/support-application-and…
RomainMuller Jul 7, 2025
e0902ba
progress: integrate latest state of DataDog/libddwaf-rust#5
RomainMuller Jul 7, 2025
1d0b374
progress: partial request payload detection & parsing
RomainMuller Jul 8, 2025
cd8e2cf
Update to latest commit from DataDog/libddwaf-rust#5
RomainMuller Jul 9, 2025
da3d640
Finish implementing body parsing hueristics for more mime types
RomainMuller Jul 9, 2025
87837d1
merge origin/main into jordan.gonzalez/appsec/support-application-and…
RomainMuller Jul 9, 2025
40c0e81
Process WAF result
RomainMuller Jul 9, 2025
68c055f
Wire up response body handling
RomainMuller Jul 10, 2025
8989366
Merge origin/main into jordan.gonzalez/appsec/support-application-and…
RomainMuller Jul 15, 2025
4eaa311
Wire AppSec information through to the lifecycle/invocation processor
RomainMuller Jul 15, 2025
26cd814
Add test for invalid rules configuration behavior
RomainMuller Jul 16, 2025
910f542
AI CHECKPOINT - PLAN.md
RomainMuller Jul 16, 2025
a323f47
First pass of tests + some initial touchups
RomainMuller Jul 16, 2025
19addc1
Touchups on tests of crate::appsec::payload
RomainMuller Jul 16, 2025
2582d39
Finalized touchups on crate::appsec::payload
RomainMuller Jul 16, 2025
c4854bd
merge origin/main in jordan.gonzalez/appsec/support-application-and-a…
RomainMuller Jul 16, 2025
d17cc48
Touchups to crate::appsec (Processor) tests, initial
RomainMuller Jul 16, 2025
383fe8e
Exclude test modules from coverage counts (they skew) + better model …
RomainMuller Jul 17, 2025
4e54160
Update embedded rules to 1.15.0
RomainMuller Jul 17, 2025
5d370b7
merge origin/main into jordan.gonzalez/appsec/support-application-and…
RomainMuller Jul 17, 2025
c184b42
Test coverage for ContextBuffer AAP bindings
RomainMuller Jul 17, 2025
fbd9022
Re-use payloads from tests/payloads instead of inlining large objects
RomainMuller Jul 17, 2025
3b236e7
FIPS-capable libddwaf-rust
RomainMuller Jul 17, 2025
097dbe5
Update LICENSE-3rdparty.csv
RomainMuller Jul 17, 2025
64f3913
Also verify metrics in Context test
RomainMuller Jul 18, 2025
d276d88
Implement API Security schema extraction feature + route-aware sampler
RomainMuller Jul 18, 2025
28a8832
Make libclang-dev available in gitlab container
RomainMuller Jul 21, 2025
c580a90
Merge origin/main into jordan.gonzalez/appsec/support-application-and…
RomainMuller Jul 21, 2025
cec9428
Merge origin/main into jordan.gonzalez/appsec/support-application-and…
RomainMuller Jul 21, 2025
1671086
add `clang-dev` to alpine compile
duncanista Jul 22, 2025
3eddce0
update alpine to `3.22`
duncanista Jul 22, 2025
a2a1ccc
alpine typo
duncanista Jul 22, 2025
e80a5f0
update config merging for `yaml`
duncanista Jul 22, 2025
9b922a9
add `llvm-dev` for alpine builds
duncanista Jul 22, 2025
abfc396
remove licenses in `.yml`
duncanista Jul 22, 2025
86c699b
manual build check for ci image
duncanista Jul 22, 2025
6183ea2
update Dockerfile
duncanista Jul 22, 2025
09b67f8
ensure build for musl targets can succeed
duncanista Jul 23, 2025
598cdeb
eol
duncanista Jul 23, 2025
61eff51
Merge branch 'main' into jordan.gonzalez/appsec/support-application-a…
duncanista Jul 23, 2025
b32ac72
Move musl RUSTFLAGS into `.cargo/config.toml`, upgrade to libddwaf@1.…
RomainMuller Jul 22, 2025
8f9e0d6
Move to rust 2024 edition
RomainMuller Jul 24, 2025
9f4016e
edition2024 style fixes
RomainMuller Jul 24, 2025
63a67cc
Merge remote-tracking branch 'origin' into jordan.gonzalez/appsec/sup…
duncanista Jul 24, 2025
8c3de95
resolve merge conflicts
duncanista Jul 24, 2025
b349d91
resolve issues in pipelines
duncanista Jul 24, 2025
23d8fb0
Make CI pass by tweaking linker setups
RomainMuller Jul 25, 2025
f4cea50
update layer size for amd64
duncanista Jul 25, 2025
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 0 additions & 1 deletion .cargo/config.toml
Original file line number Diff line number Diff line change
@@ -1,4 +1,3 @@
[alias]
license = "dd-rust-license-tool check"
format = "fmt --all && clippy --workspace --all-features --fix"

6 changes: 2 additions & 4 deletions .gitlab/Dockerfile
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
FROM registry.ddbuild.io/images/docker:24.0.5

RUN apt-get update && apt-get install -y --fix-missing --no-install-recommends \
curl gcc gnupg g++ make cmake unzip openssl g++ uuid-runtime
curl gcc gnupg g++ make cmake unzip openssl g++ uuid-runtime libclang-dev

# Install AWS CLI
RUN curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
Expand All @@ -16,8 +16,6 @@ RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | \
sh -s -- --profile minimal --default-toolchain stable -y

RUN source $HOME/.cargo/env
ENV PATH /root/.cargo/bin/:$PATH
ENV PATH=$PATH:/root/.cargo/bin/

RUN rustup component add rust-src --toolchain stable


8 changes: 4 additions & 4 deletions .gitlab/datasources/flavors.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ flavors:
needs_layer_publish: true
suffix: amd64
layer_name_base_suffix: ""
max_layer_compressed_size_mb: 26
max_layer_compressed_size_mb: 27
max_layer_uncompressed_size_mb: 54

- name: arm64
Expand All @@ -16,7 +16,7 @@ flavors:
needs_layer_publish: true
suffix: arm64
layer_name_base_suffix: "-ARM"
max_layer_compressed_size_mb: 23
max_layer_compressed_size_mb: 24
max_layer_uncompressed_size_mb: 50

- name: amd64, alpine
Expand All @@ -40,7 +40,7 @@ flavors:
needs_layer_publish: true
suffix: amd64-fips
layer_name_base_suffix: "-FIPS"
max_layer_compressed_size_mb: 26
max_layer_compressed_size_mb: 27
max_layer_uncompressed_size_mb: 56

- name: arm64, fips
Expand All @@ -50,7 +50,7 @@ flavors:
needs_layer_publish: true
suffix: arm64-fips
layer_name_base_suffix: "-ARM-FIPS"
max_layer_compressed_size_mb: 23
max_layer_compressed_size_mb: 24
max_layer_uncompressed_size_mb: 52

- name: amd64, fips, alpine
Expand Down
Loading
Loading