From c6649173f32765b0ae748742c7543ca5e5b7523a Mon Sep 17 00:00:00 2001 From: "risk-engine-production[bot]" <142443715+risk-engine-production[bot]@users.noreply.github.com> Date: Tue, 10 Oct 2023 14:57:01 +0000 Subject: [PATCH] feat: add Risk Engine configuration --- .platform/.riskEngineConfig.yaml | 49 ++++++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) create mode 100644 .platform/.riskEngineConfig.yaml diff --git a/.platform/.riskEngineConfig.yaml b/.platform/.riskEngineConfig.yaml new file mode 100644 index 0000000..ab823f1 --- /dev/null +++ b/.platform/.riskEngineConfig.yaml @@ -0,0 +1,49 @@ +riskThreshold: 30 +groupConfigProfile: TelusDigital +automatedReleaseApproval: false +# The default configuration for Risk Engine will run any configured plugins but +# cannot exempt an application from the normal release approval process established. +# To learn more about having your Risk Engine configuration approved for automated release +# See this Documentation: +# https://github.com/telus/sre-risk-engine/blob/main/docs/general/automated-release-process.md +# team: +# Please select the correct role and team name for this application +# See Documentation: +# https://github.com/telus/sre-risk-engine/blob/main/docs/general/risk-config-file-setup.md#team +# role: < Enablement || Outcome > +# name: < MyTELUS || Business || Mobility || HomeSolutions || DigitalCommerce || Platform > + +ignoredFiles: + - "package-lock.json" + # Add additional file or folder paths that should be ignored from Risk Engine analysis i.e. generated files with no inherent risk + # e.g. Add a pattern to match mocked files used in testing: - "**/mocks/**" + +riskInputs: + - name: gitBranchProtection + - name: innersource + - name: linesChanged + - name: semanticCommit + - name: changedFiles + matchChangesGlobPatterns: + "**/*.*": "low" + # Add Additional Patterns based on the details of your application + # e.g. Add a pattern for the typical files the contain source code: "**/*.js": "medium" + # e.g. Add a pattern for folders in your application that contain CI procedures/workflows: ".github/**": "high" + # e.g. Add a pattern for folders in your application that deployment configuration and scripts: ".platform/openshift/**": "high" + # - name: prDescription + # Please consider customizing this plugin to validate PR descriptions against a template. + # See Documentation: + # https://github.com/telus/sre-risk-engine/blob/main/docs/general/pr-template-setup.md + # - name: testCoverage + # covReportPath: path/to/committed/coverage-summary.json + # The testCoverage plugin requires some application configuration to set up your testing suite to output the correct information for Risk Engine + # Please consider following the Guide documentation here: + # https://github.com/telus/sre-risk-engine/blob/main/docs/api-reference/inputs/test-coverage-input.md + - name: dockerFileHealth + disabled: true + - name: openshiftTemplateHealth + disabled: true + - name: dynatraceMetricsAnalyzer + disabled: true + - name: dynatraceVulnerabilityAlerts + disabled: true