docker/harbor
1
0
Fork 0
mirror of https://github.com/goharbor/harbor.git synced 2026-10-26 09:59:33 +03:00
Code Activity
12,727 Commits 123 Branches 381 Tags
copilot/explore-codebase-implementation-plan
Commit Graph

271 Commits

Author SHA1 Message Date
Wang Yan
648037f0f3 ci: use local base for component builds; fix flaky log rotation test (#23357) 
* ci: use local base for component builds; fix flaky log rotation test

- build-package.yml: set PULL_BASE_FROM_DOCKERHUB=false so components
  build on the base image built in the same run, not a stale remote tag.
- test_log_rotation.py: accept Stopped or Success for the dry-run purge
  job to avoid a timing flake.

Signed-off-by: wang yan <yan-yw.wang@broadcom.com>

* fix ci failure

Signed-off-by: wang yan <yan-yw.wang@broadcom.com>

---------

Signed-off-by: wang yan <yan-yw.wang@broadcom.com>
 2026-06-12 15:53:59 +08:00
Wang Yan
a37374efe9 Harden crypto usage and drop unused SMTP package (#23307) 
- Use stdlib crypto/pbkdf2 instead of golang.org/x/crypto/pbkdf2 for
  password/secret hashing (output unchanged; no migration needed).
- Restrict JWT signing to RSA/RSA-PSS and reject other methods in
  pkg/token (default RS256 unchanged).
- Remove unused common/utils/email package (no references in codebase).

Signed-off-by: wang yan <yan-yw.wang@broadcom.com>
Co-authored-by: wang yan <yan-yw.wang@broadcom.com>
 2026-06-11 14:48:09 +08:00
fiona-xie
ee1177d331 test(UI): fix and upgrade UI robot test cases for Angular v21 / Clarity v18 (#23344) 
test(UI): fix UI robot test cases and locators for Angular and Clarity upgrade

Signed-off-by: fiona-xie <fei-fx.xie@broadcom.com>
 2026-06-10 17:08:53 +08:00
Rakshit
30cc7795d6 Fix spelling error in comments (#23217) 
fixing spelling mistakes in comments

Signed-off-by: Rakshit Yadav <yadavrakshit60@gmail.com>
 2026-05-13 08:53:30 +00:00
stonezdj(Daojun Zhang)
914738c3f1 Update artifact_accessory to add source column to identify accessory (#23144) 
Add project_metadata config item proxy_referrer_api
   Rename getRemoteRepo to GetRemoteRepo

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
 2026-04-24 08:11:28 +00:00
stonezdj(Daojun Zhang)
ee96bb779b Add proxy cache from dockerhub, harbor, jfrog (#23121) 
default to run proxy cache from harbor
    add SKIP_PROXY_CACHE setting to skip run proxy cache testcase in github action incase
    registry.goharbor.io unstable

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
 2026-04-20 21:03:23 +08:00
Wang Yan
1006a2010f bump go and base images (#22831) 
1, up go to v1.25.7.
2, up the base photon to latest.

Signed-off-by: wang yan <yan-yw.wang@broadcom.com>
Co-authored-by: wang yan <yan-yw.wang@broadcom.com>
 2026-02-11 17:39:35 +08:00
miner
ddb73e4177 refine apitest to adopt proxy environment (#22706) 
refine apitest

Signed-off-by: my036811 <miner.yang@broadcom.com>
 2026-01-07 14:57:02 +08:00
Prasanth Baskar
221037378a feat: Single Active Replication (#21347) 
feat(replication): add Single Active Replication per policy

* Added single_active_replication field to schema & DB table
* Updated API, controller & handler to enforce single execution per policy
* Added checkbox in UI to enable/disable single_active_replication for a
  policy
* Implemented necessary backend & frontend tests
* Prevents parallel runs per policy if single_active_replication is enabled

Signed-off-by: bupd <bupdprasanth@gmail.com>
 2025-08-11 18:02:56 +08:00
miner
c0a859d538 lazy load v2_swagger_client module (#22154) 
Signed-off-by: my036811 <miner.yang@broadcom.com>
 2025-07-07 14:51:09 +08:00
miner
3df34c5735 increase docker client timeout for robot case (#21994) 
* increase docker client timeout for robot case

Signed-off-by: my036811 <miner.yang@broadcom.com>
Signed-off-by: miner <miner.yang@broadcom.com>
 2025-05-13 11:45:09 +00:00
stonezdj(Daojun Zhang)
b60bd1a69b Update xpath for some UI components (#21817) 
Update testcase for audit log enhancement
    Add e2e_setup for e2e testcases

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
 2025-04-02 09:12:22 +00:00
stonezdj(Daojun Zhang)
45659070b7 Update purge audit to purge both audit_log_ext and audit_log (#21608) 
Fix integration issue with UI

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
 2025-02-18 09:45:46 +00:00
stonezdj(Daojun Zhang)
f808f33cca Add user login event to audit log (#21415) 
Add common event handler
  Register login event
  Update previous audit log event redirect to auditlogext table

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
 2025-01-23 15:55:22 +08:00
stonezdj(Daojun Zhang)
4d5bc19866 Implement audit log ext API (#21414) 
Signed-off-by: stonezdj <stone.zhang@broadcom.com>
 2025-01-16 09:23:25 +00:00
Wang Yan
2140a283bf remove with_signature (#21420) 
Signed-off-by: wang yan <wangyan@vmware.com>
 2025-01-16 05:51:07 +00:00
stonezdj(Daojun Zhang)
7c502a8581 Remove id field from payload when update purge audit or gc schedule (#21408) 
Signed-off-by: stonezdj <stone.zhang@broadcom.com>
 2025-01-14 06:48:50 +00:00
stonezdj(Daojun Zhang)
6001359038 Update testcase in main branch (#21375) 
Update robot account e2e testcase for export-cve change

    update job service schedule testcase
    switch dockerhub to registry.goharbor.io

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
 2025-01-06 14:17:42 +08:00
stonezdj(Daojun Zhang)
9e55afbb9a Update the testcase for v2.12.0, changes include (#21113) 
pull image from registry.goharbor.io instead of dockerhub
   Update testcase to support Docker Image Can Be Pulled With Credential
   Change gitlab project name when user changed.
   Update permissions count and permission count total
   Change webhook_endpoint_ui

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
 2024-10-30 20:07:01 +08:00
Shengwen YU
1fd606a02b fix: migrate cicd to registry goharbor (#20872) 
* fix: migrate cicd to registry goharbor

Signed-off-by: Shengwen Yu <yshengwen@vmware.com>

* fix: use ${LOCAL_REGISTRY}

Signed-off-by: Shengwen Yu <yshengwen@vmware.com>

---------

Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
 2024-08-26 14:43:52 +08:00
Shengwen YU
295e075568 add Test Case for SBOM feature (#20797) 
Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
 2024-08-01 16:05:39 +08:00
Shengwen YU
c791b39a26 fix: add stop_scan_payload when call stop scan api (#20353) 
Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
 2024-04-26 06:13:00 +00:00
Shengwen YU
9b164f3fee feat: add tc for limited guest of a project to get repository (#20311) 
Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
 2024-04-22 06:36:35 +00:00
Wang Yan
461a5fa50d add stop sbom scanning API (#20200) 
* add stop sbom scanning API

1. [UI] support to stop sbom scanning #20200
2. add type for stop scanning api, make it able to support both vulnerability and sbom.
3. refactor the db query to support multiple extra attributes.

Signed-off-by: wang yan <wangyan@vmware.com>
Signed-off-by: xuelichao <xuel@vmware.com>
Co-authored-by: xuelichao <xuel@vmware.com>
 2024-04-09 16:07:47 +08:00
Shengwen YU
c8370faeeb fix: test robot account permission (#20240) 
Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
 2024-04-08 12:57:38 +08:00
Shengwen YU
c12064df4e feat: add api test case for quota sorting (#20209) 
Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
 2024-04-07 13:47:49 +08:00
Shengwen YU
1e85cab33a update retry of get_scan_data_export_execution from 5 to 15 (#19959) 
Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
 2024-02-11 20:24:57 +09:00
Yang Jiao
80930daaac Add quota permissions testcase (#19822) 
Signed-off-by: Yang Jiao <yang.jiao@broadcom.com>
Co-authored-by: Yang Jiao <yang.jiao@broadcom.com>
 2024-01-12 10:25:38 +08:00
Yang Jiao
a534094ec0 Update Robot Account Test Case (#19710) 
Update project and system robot account testcase
Update system robot account do replication testcase

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-12-14 03:26:25 +00:00
Yang Jiao
52d2d5c303 Updating Permission Test Scripts (#19687) 
Support for test cases that run multiple resources in a single run

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-12-08 06:10:19 +00:00
Yang Jiao
7cef4217b0 Add user API test case (#19638) 
Fix #19280

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-11-29 10:25:02 +08:00
Shijun Sun
f26b9f52e9 Update the test script for the project permissions (#19623) 
Signed-off-by: AllForNothing <sshijun@vmware.com>
 2023-11-28 02:16:02 +00:00
Yang Jiao
45b41d4443 Add API(scan,volumes,jobservice,scanner,label,securityhub,catalog) permission testcases (#19595) 
Add scan,volumes,jobservice,scanner,label,securityhub,catalog permission testcases

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-11-22 09:08:27 +00:00
Shijun Sun
13ae233729 Add test cases for the project level permissions (#19593) 
Add API test cases for project permission of a robot account

Signed-off-by: AllForNothing <sshijun@vmware.com>
 2023-11-22 08:13:04 +00:00
Shijun Sun
d967ac0fb6 Update the permission scope (#19603) 
1. Update the permission scope
2. Sort the resources and actions by unicode

Signed-off-by: AllForNothing <sshijun@vmware.com>
 2023-11-22 06:37:31 +00:00
Wang Yan
062d144d22 add permission validation for robot creating and updating. (#19598) 
* add permission validation for robot creating and updating.

It is not allowed to create an new robot with the access outside the predefined scope.

Signed-off-by: wang yan <wangyan@vmware.com>

* Fix robot testcase and update robot permission metadata (#167)

1. Fix robot testcase
2. update robot permission metadata

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
Signed-off-by: wang yan <wangyan@vmware.com>

---------

Signed-off-by: wang yan <wangyan@vmware.com>
Signed-off-by: Yang Jiao <jiaoya@vmware.com>
Co-authored-by: Yang Jiao <72076317+YangJiao0817@users.noreply.github.com>
 2023-11-22 12:51:03 +08:00
Maksym Trofimenko
996e57b511 Feature: GDPR compliant audit logs (#17396) 2023-11-20 21:31:22 +01:00
Yang Jiao
08cb0803a8 Add API(audit-log,project,registry,replication) permission testcase (#19584) 
Add audit-log,project,registry,replication API permission testcase

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-11-16 08:51:00 +00:00
Yang Jiao
04397fb6a2 Add API permission testcase (#19571) 
usage example:
HARBOR_BASE_URL=https://{ip_or_domain}/api/v2.0 RESOURCE=preheat-instance  USER_NAME={username} PASSWORD={password}  python tests/apitests/python/test_permission.py

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-11-14 09:38:39 +08:00
Yang Jiao
35a605ec05 Add notation sign artifact API test case (#19549) 
Fix #19545

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-11-07 08:39:37 +00:00
Yang Jiao
e1a44232f4 Add banner message UI test case (#19529) 
Fix #19272

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-11-06 03:41:35 +00:00
Yang Jiao
2916d09917 Add banner message API test case (#19510) 
Fix #19271

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-10-31 08:54:04 +00:00
Yang Jiao
61fdf25e5d Add GC details and GC workers API test case (#19482) 
Fix #19276

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-10-25 15:12:53 +08:00
Yang Jiao
f58dc2dbec Add GC accessory UI test case (#19470) 
Fix #19274

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-10-23 07:46:00 +00:00
Yang Jiao
322dce5272 Add GC accessory API test case (#19462) 
Fix #19273

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-10-20 06:49:20 +00:00
Yang Jiao
50e466b281 Add security hub API test case (#19376) 
Fix #19269

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-09-20 18:58:55 +08:00
guangwu
345b5e545d fix: privileges member successfully typo (#19091) 
Signed-off-by: guoguangwu <guoguangwu@magic-shield.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
 2023-08-07 17:21:38 +08:00
Wang Yan
db82d6e082 fix signer name (#19001) 
Append the signer name to the error message which will be returned by the client

Signed-off-by: wang yan <wangyan@vmware.com>
 2023-07-25 21:30:32 +08:00
Yang Jiao
26f6197230 Fix APITEST_DB_PROXY_CACHE x509 (#18977) 
Fix APITEST_DB_PROXY_CACHE x509, Because cicd.harbor.vmwarecna uses a self-signed certificate.

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-07-24 10:52:54 +08:00
Wang Yan
ff2b99d711 enable notary v2 policy checker (#18927) 
add notary v2 pull policy, when it enables, the artifact cannot be pull without the notation signature.

Signed-off-by: wang yan <wangyan@vmware.com>
 2023-07-14 13:35:56 +08:00