RoseSecurity

Cloud Posse Module and Component Utilities

A collection of utilies for finding, navigating, and downloading Cloud Posse modules and components.

Important

The following dependencies are required to run these scripts: jq, gh, and fzf

Module Finder

RoseSecurity’s Configuration Shenanigans

Essential Beliefs

Important

💯 The JetBrains Mono font is the only acceptable option

💯 If you’re using light mode, you’re wrong

💯 :x basically does the same thing as :wq! in Vim. Save yourself some keystrokes

Terraform Best Practices

Introduction

Terraform is a powerful tool for managing infrastructure as code. However, like any tool, Terraform has its own set of best practices that you should follow to ensure that your infrastructure is secure, reliable, and maintainable. This guide provides opinionated recommendations for Terraform best practices based on CloudPosse and HashiCorp guidance.

	#!/usr/bin/env bash

	# Generate Jira tickets programmatically
	# Requires gum and jira-cli for interactivity
	# Install gum: brew install gum

	if ! command -v gum &>/dev/null; then
	echo "Error: Gum is not installed. Install it with 'brew install gum'."
	exit 1
	fi

	#!/bin/bash

	# Help menu
	usage() {
	echo "Usage: $0 -o REPO_OWNER -r REPO_NAME"
	exit 1
	}

	while getopts ":o:r:" opt; do
	case ${opt} in

	local function get_trivy_dir()
	return vim.fn.stdpath('data') .. '/trivy'
	end

	-- Create template file
	local function create_csv_template()
	local template_path = get_trivy_dir() .. '/csv.tpl'
	local template_content = [[
	{{ range . }}
	{{ $target := .Target }}

	from flask import Flask, request, render_template, redirect, url_for, jsonify
	from pydantic import BaseModel, ValidationError
	from gevent.pywsgi import WSGIServer
	import json
	import datetime

	app = Flask(__name__)

	# Model for metadata of the control request
	class ControlRequest(BaseModel):

	stage:
	- test

	trivy:
	stage: test
	image: docker:stable
	services:
	- name: docker:dind
	entrypoint: ["env", "-u", "DOCKER_HOST"]
	command: ["dockerd-entrypoint.sh"]