diff --git a/.github/workflows/ruby.yml b/.github/workflows/ruby.yml new file mode 100644 index 0000000..76c166e --- /dev/null +++ b/.github/workflows/ruby.yml @@ -0,0 +1,33 @@ +# This workflow uses actions that are not certified by GitHub. +# They are provided by a third-party and are governed by +# separate terms of service, privacy policy, and support +# documentation. +# This workflow will download a prebuilt Ruby version, install dependencies and run tests with Rake +# For more information see: https://github.com/marketplace/actions/setup-ruby-jruby-and-truffleruby + +name: Ruby + +on: + push: + branches: [ master ] + pull_request: + branches: [ master ] + +jobs: + test: + + runs-on: ubuntu-latest + + steps: + - uses: actions/checkout@v2 + - name: Set up Ruby + # To automatically get bug fixes and new Ruby versions for ruby/setup-ruby, + # change this to (see https://github.com/ruby/setup-ruby#versioning): + # uses: ruby/setup-ruby@v1 + uses: ruby/setup-ruby@ec106b438a1ff6ff109590de34ddc62c540232e0 + with: + ruby-version: 2.6 + - name: Install dependencies + run: bundle install + - name: Run tests + run: bundle exec rake diff --git a/.github/workflows/shiftleft-analysis.yml b/.github/workflows/shiftleft-analysis.yml new file mode 100644 index 0000000..5a97689 --- /dev/null +++ b/.github/workflows/shiftleft-analysis.yml @@ -0,0 +1,36 @@ +# This workflow integrates Scan with GitHub's code scanning feature +# Scan is a free open-source security tool for modern DevOps teams from ShiftLeft +# Visit https://slscan.io/en/latest/integrations/code-scan for help +name: SL Scan + +# This section configures the trigger for the workflow. Feel free to customize depending on your convention +on: push + +jobs: + Scan-Build: + # Scan runs on ubuntu, mac and windows + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v1 + # Instructions + # 1. Setup JDK, Node.js, Python etc depending on your project type + # 2. Compile or build the project before invoking scan + # Example: mvn compile, or npm install or pip install goes here + # 3. Invoke Scan with the github token. Leave the workspace empty to use relative url + + - name: Perform Scan + uses: ShiftLeftSecurity/scan-action@master + env: + WORKSPACE: "" + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + SCAN_AUTO_BUILD: true + with: + output: reports + # Scan auto-detects the languages in your project. To override uncomment the below variable and set the type + # type: credscan,java + # type: python + + - name: Upload report + uses: github/codeql-action/upload-sarif@v1 + with: + sarif_file: reports diff --git a/.whitesource b/.whitesource new file mode 100644 index 0000000..55b922e --- /dev/null +++ b/.whitesource @@ -0,0 +1,12 @@ +{ + "scanSettings": { + "baseBranches": [] + }, + "checkRunSettings": { + "vulnerableCheckRunConclusionLevel": "failure", + "displayMode": "diff" + }, + "issueSettings": { + "minSeverityLevel": "LOW" + } +} \ No newline at end of file diff --git a/README.md b/README.md index 1c6bb69..ea068eb 100644 --- a/README.md +++ b/README.md @@ -1,10 +1,10 @@ -![SCConfigMgr Driver Auatomation Tool](https://i1.wp.com/msendpointmgr.com/wp-content/uploads/2020/04/MSEndpoingMgrDat.jpg?resize=1024%2C641&ssl=1) +![SCConfigMgr Driver Auatomation Tool](https://i1.wp.com/www.scconfigmgr.com/wp-content/uploads/2019/12/img_5de59253bea43.png?resize=1024%2C641&ssl=1) # Driver Automation Tool -Welcome to the new home of the **MSEndpointMgr Driver Automation Tool**. +Welcome to the new home of the **SCConfigMgr Driver Automation Tool**. -**If you would like to donate to the development of this tool, then please use the sponsor button at the top of the page.** +If you would like to donate to the development of this tool, then please use the sponsor button at the top of the page. **FAQ** @@ -16,17 +16,16 @@ Welcome to the new home of the **MSEndpointMgr Driver Automation Tool**. Implemenation guides for modern driver management and modern bios management can be found here; -[https://www.msendpointmgr.com/modern-driver-management/](https://www.msendpointmgr.com/modern-driver-management/) +[https://www.scconfigmgr.com/modern-driver-management/](https://www.scconfigmgr.com/modern-driver-management/) -[https://www.msendpointmgr.com/modern-bios-management/](https://www.msendpointmgr.com/modern-bios-management/) +[https://www.scconfigmgr.com/modern-bios-management/](https://www.scconfigmgr.com/modern-bios-management/) All source code and installers will be maintained here from 11-March-2020. -**MD5 Hash Values for build 6.4.9** - -DriverAutomationToolSetup.msi - 02534EDDB7F285A06EADBE6CA771DC3D - -DriverAutomationTool.exe - BDFBED02386B33090FD96E19C7FACDAC +**MD5 Hash Values for build 6.4.6** +DriverAutomationToolSetup.msi - 09C78BB04B88A99176A685B70D23C6C9 +DriverAutomationTool-Verbose.exe - 64611A06AFF647D2D07B7674FF055573 +DriverAutomationTool.exe - 6E751D29C504DBCBEAE3DE7F6B2A8753 Version history: 6.0.0 - (2018-03-29) New verison. Graphical redesign, improved layout, HP individual driver downloads @@ -102,19 +101,6 @@ DriverAutomationTool.exe - BDFBED02386B33090FD96E19C7FACDAC 6.4.6 - (2020-18-03) Fixed Lenovo download link logic and added further output Updated package creation for all packages just to include the SKU/BaseBoard values Updated link within the tool to GitHub as Technet is being retired - Updated custom package creation to include Windows 10 1909 - 6.4.8 - (2020-15-07) Added support for Windwos 10 2004 - Added support for HP SoftPaq creation and updated UI to select available SoftPaqs per models - Added support for creation of 7zip driver packages - Added support for XML based modern driver and BIOS management solutions - Faster UI and XML handling - Updated Lenovo XML source - Dell Flash 64w handling updated - 6.4.9 - (2020-15-09) Added WIM Support - Updated model and distribution point WMI queries for better performance - Updated XML logic file creation function - Updated Dell XML handling - 6.4.9 Hotfix - (2020-21-10) Lenovo XML hotfix - + Updated custom package creation to include Windows 10 1909 diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..034e848 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,21 @@ +# Security Policy + +## Supported Versions + +Use this section to tell people about which versions of your project are +currently being supported with security updates. + +| Version | Supported | +| ------- | ------------------ | +| 5.1.x | :white_check_mark: | +| 5.0.x | :x: | +| 4.0.x | :white_check_mark: | +| < 4.0 | :x: | + +## Reporting a Vulnerability + +Use this section to tell people how to report a vulnerability. + +Tell them where to go, how often they can expect to get an update on a +reported vulnerability, what to expect if the vulnerability is accepted or +declined, etc.