release-to-npm pr

.gitignore

@@ -0,0 +1,2 @@
+.idea/
+node_modules

CONTRIBUTING.md

@@ -9,8 +9,9 @@ This repository is used by Plugin developers for maintaining the official plugin
 
 ### How to Contribute a Plugin
 
-1. Fork this repository, develop and test your Plugin
-2. Choose the correct folder for your plugin based on the information in the [Repository Structure](README.md#repository-structure) section
+1. Develop and test your plugin
+2. Fork this repository
+2. Choose the correct folder for your plugin based on the information in the [Repository Structure](docs/plugin.md#plugin-file-structure) section
 3. Ensure your Plugin follows the [technical](#technical-requirements) and [documentation](#documentation-requirements) guidelines, described below
 4. Update [Plugin Catalog](CATALOG.md)
 5. Submit a pull request

README.md

@@ -1,60 +1,27 @@
-# Codefresh Plugins
-
-Use this repository to submit official Plugins for Codefresh. Plugins are curated automated step definitions for Codefresh. For more information about using Codefresh, see its
-[documentation](https://docs.codefresh.io). 
-
-## How do I install these plugins?
-
-Codefresh Plugins are available as plain Docker images. As long as Plugin Docker image is accessible, Codefresh can use it for its pipelines.
-
-## How do I use plugins from the Incubator repository?
-
-*TBD*
-
-## Codefresh Plugin Format
-
-Take a look at the [example plugin](#) for reference when you're writing your first few plugins.
-
-The Plugin folder must contain `plugin.yaml` and `README.md` files.
-
-Before contributing a Plugin, become familiar with the format. Note that the project is still under active development and the format may still evolve a bit.
-
-## Repository Structure
-
-This GitHub repository contains the source for the packaged and versioned plugins released in the [`gs://codefresh-plugins` Google Storage bucket](https://console.cloud.google.com/storage/browser/codefresh-plugins/) (the Plugins Repository).
-
-The Plugins in the `stable/` directory in the master branch of this repository match the latest packaged Plugins in the Plugin Repository, though there may be previous versions of a Plugin available in that Plugin Repository.
-
-The purpose of this repository is to provide a place for maintaining and contributing official Plugins, with CI processes in place for managing the releasing of Plugins into the Plugin Repository.
-
-The Plugins in this repository are organized into two folders:
-* stable
-* incubator
-
-Stable Plugins meet the criteria in the [technical requirements](CONTRIBUTING.md#technical-requirements).
-
-Incubator Plugins are those that do not meet these criteria. Having the incubator folder allows plugins to be shared and improved on until they are ready to be moved into the stable folder. The plugins in the `incubator/` directory can be found in the [`gs://codefresh-plugins-incubator` Google Storage Bucket](https://console.cloud.google.com/storage/browser/codefresh-plugins-incubator).
-
-In order to get a Plugin from incubator to stable, Plugin maintainers should open a pull request that moves the plugin folder.
-
-## Contributing a Plugin
-
-We'd love for you to contribute a Plugin that provides a useful automated step for Codefresh. Please read our [Contribution Guide](CONTRIBUTING.md) for more information on how you can contribute Plugins.
-
-## Review Process
-
-The following outlines the review procedure used by the Plugin repository maintainers. Github labels are used to indicate state change during the review process. 
-
-* ***AWAITING REVIEW*** - Initial triage which indicates that the PR is ready for review by the maintainers team. All e2e tests must pass in-order to move to this state
-* ***CHANGES NEEDED*** - Review completed by at least one maintainer and changes needed by contributor (explicit even when using the review feature of Github)
-* ***CODE REVIEWED*** - The plugin structure has been reviewed and found to be satisfactory given the [technical requirements](CONTRIBUTING.md#technical-requirements) (may happen in parallel to UX REVIEWED)
-* ***UX REVIEWED*** - The plugin installation UX has been reviewed and found to be satisfactory. (may happen in parallel to CODE REVIEWED)
-* ***LGTM*** - Added ONLY once both UX/CODE reviewed are both present. Merge must be handled by someone OTHER than the maintainer that added the LGTM label. This label indicates that given a quick pass of the comments this change is ready to merge
-
-### Stale Pull Requests
-
-After initial review feedback, if no updates have been made to the pull request for 1 week, the `stale` label will be added. If after another week there are still no updates it will be closed. Please re-open if/when you have made the proper adjustments.
-
-## Status of the Project
-
-This project is still under active development, so you might run into [issues](https://github.com/codefresh-io/plugins/issues). If you do, please don't be shy about letting us know, or better yet, contribute a fix or feature.
+# Codefresh plugins 
+
+Codefresh Plugins are Docker images made especially for use in Codefresh freestyle steps. Each plugin facilitates a common task that would otherwise be difficult to achieve.
+See each plugin readme for more info and usage instructions.
+
+## Plugins
+
+| Plugin|  Description| Tags|
+| --- | --- |  --- |
+| [Helm](plugins/helm/README.md) | Deploy Helm charts | `kubernetes` `helm`|
+| [Codefresh Cli](plugins/codefresh-cli/README.md) | Operate on Codefresh resources | `cli` `codefresh`|
+| [Slack](plugins/slack/README.md)| Send message to slack| `slack` `notify`|
+| [Deploy to ECS](plugins/ecs-deploy/README.md)| Deploy docker image to ECS| `ecs` `deploy` `containers` `aws`                         |
+| [Deploy Kompose](plugins/kompose/README.md)| Deploy Docker Compose to Kubernetes cluster with Kubernetes [Kompose](http://kompose.io) | `docker` `docker-compose` `kompose` `deploy` `kubernetes` |
+| [GitHub PR](plugins/github-pr/README.MD)| Operates on pull requests on GitHub | `github` `pull-request` |
+| [Run Jenkins Jobs](plugins/run-jenkins-job/README.md)| Run jenkins job from codefresh pipeline| `jenkins` `job`|
+| [Deploy to DCOS](plugins/dcos-app-deploy/README.md) | Deploy application image to DC/OS cluster | `dcos` `deploy` `containers` |
+| [Interact with Jira](plugins/jira/README.md) | Interact with Jira from codefresh pipelines| `jira` `workflow`|
+| [Makisu](plugins/makisu/README.md) | Building images using the Makisu tool | `makisu` `uber`|
+| [release to npm](plugins/release-to-NPM/README.md) | Release npm modules from a pipeline | `npm` |
+| [Twistlock](plugins/cfstep-twistlock) | Security scanning of docker images using Twistlock | `security` |
+| [Clair](plugins/clair/README.md) |  Security scanning of Docker images using Clair | `security` |
+| [Import Docker Images](plugins/import-docker-images/README.md) | Import Docker images metadata into Codefresh| `docker` `codefresh`|
+| [Google KMS](plugins/google-kms/README.md) | Encryption/Decryption with Google KMS| `KMS` `codefresh`|
+| [Github Release](plugins/github-release/README.md) | Managing GitHub releases | `github` `release`|
+| [Google GKE](plugins/gke/README.md) | GKE Clusters | `GKE` `codefresh`|
+| [Vault](plugins/vault/README.md) | Export Vault Key/Value pairs as ENV variables | `Vault` `codefresh`|

docs/plugin.md

@@ -6,7 +6,7 @@ then they can be packaged into versioned archives to be deployed.
 This document explains the plugin format, and provides basic guidance for
 building plugins.
 
-## The Plugin File Structure
+## Plugin File Structure
 
 A plugin is organized as a collection of files inside of a directory. The
 directory name is the name of the plugin (without versioning information). Thus,
@@ -17,7 +17,7 @@ Inside of this directory, Codefresh will expect a structure that matches this:
 ```
 kube-deploy/
   plugin.yaml         # A YAML file containing information about the plugin
-  LICENSE             # OPTIONAL: A plain text file containing the license for the chart
+  LICENSE             # OPTIONAL: A plain text file containing the license for the plugin
   README.md           # OPTIONAL: A human-readable README file
   NOTES.md            # OPTIONAL: A plain text file containing short usage notes
 ```
@@ -50,6 +50,8 @@ volumes:
   - name: The volume name
     required: true | false (default "false")
     description: A short description for attached volume
+context:
+  - kind: Codefresh context kind to inject automatically to the plugin
 ```
 
 
@@ -93,4 +95,4 @@ cannot be overridden.
 ### Predefined Volumes and Files
 
 - `/codefresh/volume` - same volume mounted to all steps running in Codefresh pipeline
-- `/codefresh/volume/env_vars_to_export` - a placeholder file to filled with **exported** environment variables; any exported variable can be used in subsequent pipeline steps
+- `/codefresh/volume/env_vars_to_export` - a placeholder file to be filled with **exported** environment variables; any exported variable can be used in subsequent pipeline steps

dynamic-catalog.md

@@ -0,0 +1,30 @@
+# **Catalog**
+Created at ** Thu Dec 27 2018 22:37:47 GMT+0000 (Coordinated Universal Time)**
+
+
+| Plugin Name   | Image     | Description           | source | Tags  |
+| ------------- |-------------| ---- |-----|----|
+ | azure-builder | codefresh/cf-azure-builder | Docker build in Azure ACR | https://github.com/codefresh-io/azure-build-plugin |  **`docker`**  **`azure`** |
+ | clair | codefresh/klar:master | Scan an image with Clair | https://github.com/optiopay/klar |  **`clair`**  **`security`** |
+ | codefresh-cli | codefresh/cli | Operate on Codefresh resources | https://github.com/codefresh-io/codefresh |  **`cli`** |
+ | dcos-app-deploy | codefresh/cf-deploy-dcos | Deploy an application on dcos cluster | https://github.com/codefresh-io/cf-deploy-dcos |  **`dcos`**  **`deploy`**  **`deployment`** |
+ | docker-service | codefresh/docker-service | Codefresh docker-service plugin | https://github.com/codefresh-io/docker-service |  **`docker`**  **`docker-machine`**  **`docker-compose`** |
+ | ecs-deploy | codefresh/ecs | Release a Helm chart (update or install) | https://github.com/codefresh-io/cf-deploy-ecs.git |  **`ecs`**  **`deploy`**  **`containers`** |
+ | github-pr | codefresh/github-pr-plugin | Operates on GitHub pull requests | https://github.com/codefresh-io/github-pr-plugin |  **`docker`**  **`github`**  **`pull-request`** |
+ | gitsubmodules | codefresh/cfstep-gitsubmodules | Update git submodules | https://github.com/codefresh-io/cfstep-gitsubmodules |  **`git`**  **`submodules`** |
+ | gke | codefresh/plugin-gke | Codefresh gke plugin | https://github.com/codefresh-io/plugin-gke |  **`kubernetes`**  **`gke`**  **`gcloud`** |
+ | helm | codefresh/cfstep-helm | Release a Helm chart (update or install) | https://github.com/codefresh-contrib/cfplugin-step |  **`helm`**  **`kubernetes`** |
+ | helm-legacy | codefresh/plugin-helm | Release a Helm chart (update or install). There is a new Helm plugin with added capabilities, we are keeping this plugin as is for backward-compatibility. The new plugin is at /incubator/helm (https://github.com/codefresh-io/plugins/tree/master/incubator/helm) | https://github.com/codefresh-io/cf-plugin-helm |  **`helm`**  **`kubernetes`** |
+ | import-docker-images | codefresh/import-images | Import metadata for existing Docker images into Codefresh | https://github.com/codefresh-io/cf-import-image |  **`docker`** |
+ | jira | otomato/jira-cli | Update a Jira ticket | https://github.com/codefreshdemo/jira-cli-docker |  **`jira`** |
+ | kompose | codefresh/plugin-helm | Release a Docker Compose to Kubernetes | https://github.com/codefresh-io/cf-kompose-plugin |  **`docker-compose`**  **`docker`**  **`kompose`**  **`kubernetes`** |
+ | release-to-NPM |  |  |  | |
+ | run-jenkins-job | codefresh/run-jenkins-jobs | Run jenkins job from codefresh pipeline | https://github.com/codefresh-io/cf-run-jenkins-jobs |  **`docker`**  **`jenkins`** |
+ | sendgrid | codefresh/sendgridplugin | Send e-mail via Sendgrid | https://github.com/codefresh-io/sendgridplugin |  **`mail`**  **`sendgrid`** |
+ | slack | codefresh/slack-message-sender | Send message to slack channel | https://github.com/codefresh-io/slack-message-sender |  **`slack`** |
+ | slack-notifier | codefresh/slacknotifier | Send message to slack channel | https://github.com/codefresh-io/slack-notifier |  **`slack`** |
+ | testplugin | codefresh/github-pr-plugin | Creates GitHub pull request | https://github.com/codefresh-io/github-pr-plugin |  **`testplugin`** |
+ | testplugin1 | codefresh/github-pr-plugin | test plugin1! | https://github.com/codefresh-io/github-pr-plugin |  **`testplugin1`** |
+ | twilio | codefresh/twilioplugin | Send SMS message via Twilio | https://github.com/codefresh-io/twillio-plugin |  **`sms`**  **`twilio`** |
+ | versioner | docker.io/codefresh/versioner | semver versions builder | https://github.com/codefresh-io/cf-plugin-versioner.git |  **`versioner 1.0`** |
+

plugins/anchore/README.md

@@ -0,0 +1,77 @@
+# Codefresh Anchore Plugin
+
+Anchore is a service that analyzes Docker images and generates a detailed manifest of the image, a virtual ‘bill of materials’ that includes official operating system packages, unofficial packages, configuration files, and language modules and artifacts. Anchore policies can they be defined to govern security vulnerabilities, package whitelists and blacklists, configuration file contents, presence of credentials in image, manifest changes, exposed ports or any user defined checks. These policies can be deployed site wide or customized for specific images or categories of applications.
+
+For more information view the github repo here: https://github.com/anchore/anchore-engine
+
+## Prerequisites
+
+- Codefresh subscription
+- Running Anchore Engine service
+
+### Reference
+
+- Example `codefresh.yml`: https://raw.githubusercontent.com/valancej/plugins/master/plugins/anchore/codefresh.yml
+- Github repo containing Dockerfile: https://github.com/valancej/node_critical_fail
+- Anchore Documentation: https://anchore.freshdesk.com/support/home
+- Anchore CLI Image: https://hub.docker.com/r/anchore/engine-cli/
+
+## Example
+
+In this example, we will scan an image built by Codefresh. Depending on the result of the Anchore policy evaluation, we will choose to push the image to Dockerhub or not. 
+
+### Setup
+
+The example setup is described below. 
+
+### Environment Variables
+
+These environment variables can be set within Codefresh pipeline configuration.
+
+Name|Required|Description
+---|---|---
+ANCHORE_CLI_URL|Yes|The address of the Anchore server
+ANCHORE_CLI_USER|Yes|Anchore account name
+ANCHORE_CLI_PASS|Yes|Anchore account password
+ANCHORE_FAIL_ON_POLICY|No|Fail build if policy evaluation fails
+QA_IMAGE|No|Image built and scanned
+dockerhubUsername|No|Dockerhub account name
+dockerhubPassword|No|Dockerhub account password
+
+### Codefresh.yml
+
+```yaml
+version: '1.0'
+steps:
+  MyDockerImage:
+    title: Building Docker Image
+    type: build
+    image_name: ${{QA_IMAGE}}
+    working_directory: ./
+    tag: latest
+    dockerfile: Dockerfile
+    metadata:
+      set:
+      	- QA: Pending Anchore scan before push to Dockerhub..
+  ScanMyImage:
+    title: Scanning Docker Image
+    image: anchore/engine-cli:latest
+    commands:
+      - echo "Scanning image with Anchore"
+      - anchore-cli image add ${{QA_IMAGE}}
+      - echo "Waiting for analysis to complete"
+      - anchore-cli image wait ${{QA_IMAGE}}
+      - echo "Analysis complete"
+      - if [ "${{ANCHORE_FAIL_ON_POLICY}}" == "true" ] ; then anchore-cli evaluate check ${{QA_IMAGE}}; fi
+  PushImage:
+    title: Pushing Docker Image
+    description: Pushing Docker Image to Dockerhub...
+    type: push
+    candidate: '${{MyDockerImage}}'
+    image_name: jvalance/node_critical_fail
+    tag: latest
+    registry: docker.io
+    credentials:
+      username: '${{dockerhubUsername}}'
+      password: '${{dockerhubPassword}}'
+```

plugins/anchore/codefresh.yml

@@ -0,0 +1,33 @@
+version: '1.0'
+steps:
+  MyDockerImage:
+    title: Building Docker Image
+    type: build
+    image_name: ${{QA_IMAGE}}
+    working_directory: ./
+    tag: latest
+    dockerfile: Dockerfile
+    metadata:
+      set:
+      	- QA: Pending Anchore scan..
+  ScanMyImage:
+    title: Scanning Docker Image
+    image: anchore/engine-cli:latest
+    commands:
+      - echo "Scanning image with Anchore"
+      - anchore-cli image add ${{QA_IMAGE}}
+      - echo "Waiting for analysis to complete"
+      - anchore-cli image wait ${{QA_IMAGE}}
+      - echo "Analysis complete"
+      - if [ "${{ANCHORE_FAIL_ON_POLICY}}" == "true" ] ; then anchore-cli evaluate check ${{QA_IMAGE}}; fi
+  PushImage:
+    title: Pushing Docker Image
+    description: Pushing Docker Image to Dockerhub...
+    type: push
+    candidate: '${{MyDockerImage}}'
+    image_name: jvalance/node_critical_fail
+    tag: latest
+    registry: docker.io
+    credentials:
+      username: '${{dockerhubUsername}}'
+      password: '${{dockerhubPassword}}'

plugins/aqua-scan/Dockerfile

@@ -0,0 +1,50 @@
+FROM ubuntu:xenial
+
+ENV LANG C.UTF-8
+
+RUN { \
+      echo '#!/bin/sh'; \
+      echo 'set -e'; \
+      echo; \
+      echo 'dirname "$(dirname "$(readlink -f "$(which javac || which java)")")"'; \
+    } > /usr/local/bin/docker-java-home && \
+    chmod +x /usr/local/bin/docker-java-home
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+      bzip2 \
+      unzip \
+      xz-utils \
+      apt-transport-https \
+      ca-certificates \
+      curl \
+      software-properties-common \
+      python3-openssl && \
+    curl -fsSL https://download.docker.com/linux/ubuntu/gpg | apt-key add - && \
+    add-apt-repository \
+    "deb [arch=amd64] https://download.docker.com/linux/ubuntu \
+    $(lsb_release -cs) \
+    stable" && \
+    apt-get update && apt-get install -y --no-install-recommends \
+	  docker-ce=17.09.0~ce-0~ubuntu && \
+    apt-get install -y \
+      openjdk-8-jre \
+    ; \
+    rm -rf /var/lib/apt/lists/*; \
+    \
+    [ "$JAVA_HOME" = "$(docker-java-home)" ]; \
+    \
+    update-alternatives --get-selections | awk -v home="$JAVA_HOME" 'index($3, home) == 1 { $2 = "manual"; print | "update-alternatives --set-selections" }'; \
+    update-alternatives --query java | grep -q 'Status: manual' && \
+    mkdir /packages && \
+    curl -o /packages/twistcli https://cdn.twistlock.com/support/twistcli && \
+    curl -o /packages/nexus-iq-cli-1.38.0-02.jar https://download.sonatype.com/clm/scanner/nexus-iq-cli-1.38.0-02.jar
+
+COPY scripts /scripts
+
+RUN	chmod +x -R /packages
+RUN	chmod +x -R /scripts
+
+WORKDIR /scripts
+
+ENTRYPOINT ["/usr/bin/python3"]
+CMD [""]