From af5b4d67d1c665a6cf59385980480aab26021330 Mon Sep 17 00:00:00 2001 From: Tyler Turner Date: Mon, 30 Jan 2023 15:16:45 -0600 Subject: [PATCH 01/17] Bump pull request reminder to version 2.5.0 + Leaving user map out pending https://github.com/DavideViolante/pr-reviews-reminder-action/issues/98 Co-authored-by: David Riddle Co-authored-by: Michelle Pitcel Co-authored-by: Zach Carrington Co-authored-by: Tyler Turner --- .github/workflows/pr_reminder.yml | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/.github/workflows/pr_reminder.yml b/.github/workflows/pr_reminder.yml index aefa779..12a9369 100644 --- a/.github/workflows/pr_reminder.yml +++ b/.github/workflows/pr_reminder.yml @@ -1,16 +1,18 @@ -name: PRs reviews reminder - +name: PR review reminders on: schedule: - # Every weekday every 2 hours during working hours (utc), send notification - - cron: "0 13-22/2 * * 1-5" + # Every weekday at 8:30a CST / 14:30 UTC and 1:30p CST / 19:30 UTC + - cron: '30 14,19 * * 1-5' + jobs: pr-reviews-reminder: runs-on: ubuntu-latest steps: - - uses: DavideViolante/pr-reviews-reminder-action@v1.3.0 + # https://github.com/DavideViolante/pr-reviews-reminder-action/releases + - uses: DavideViolante/pr-reviews-reminder-action@v2.5.0 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: - webhook-url: ${{ secrets.WEBHOOK_URL }} + webhook-url: ${{ secrets.TEAMS_WEBHOOK }} provider: 'msteams' + ignore-label: no-reminder From 687000ebb67d0bff47c35514d8602a3d8730760b Mon Sep 17 00:00:00 2001 From: Edward Delaporte Date: Thu, 16 Feb 2023 09:49:11 -0600 Subject: [PATCH 02/17] Add provider-map and move to 2.6.0 https://github.com/DavideViolante/pr-reviews-reminder-action/pull/99/files --- .github/workflows/pr_reminder.yml | 22 +++++++++++++++++++++- 1 file changed, 21 insertions(+), 1 deletion(-) diff --git a/.github/workflows/pr_reminder.yml b/.github/workflows/pr_reminder.yml index 12a9369..2882e69 100644 --- a/.github/workflows/pr_reminder.yml +++ b/.github/workflows/pr_reminder.yml @@ -9,10 +9,30 @@ jobs: runs-on: ubuntu-latest steps: # https://github.com/DavideViolante/pr-reviews-reminder-action/releases - - uses: DavideViolante/pr-reviews-reminder-action@v2.5.0 + - uses: DavideViolante/pr-reviews-reminder-action@v2.6.0 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: webhook-url: ${{ secrets.TEAMS_WEBHOOK }} provider: 'msteams' ignore-label: no-reminder + github-provider-map: >- + apetsche1:apetsche@illinois.edu, + asvalent:asvalent@illinois.edu, + baristaTam:buch1@illinois.edu, + cstephns:cstephns@illinois.edu, + ddriddle:ddriddle@illinois.edu, + edthedev:delaport@illinois.edu, + gshere:shere@illinois.edu, + ktlack:klacker6@illinois.edu, + livn46:rheren@illinois.edu, + mabaumgartner:mab@illinois.edu, + mpitcel:mpitcel2@illinois.edu, + PrabhaManda:pmanda@illinois.edu, + rdonovan92:rdonovan@illinois.edu, + safletcher42:safletch@illinois.edu, + spaldr:spaldr@illinois.edu, + spencer-sharp:swsharp@illinois.edu, + tjuddill:tjudd@illinois.edu, + wennebo1:wennebo1@illinois.edu, + zdc217:zdc@illinois.edu From f03461aaf7b8c493d73853eb03e5df4e32372731 Mon Sep 17 00:00:00 2001 From: mpitcel <3997366+mpitcel@users.noreply.github.com> Date: Tue, 18 Apr 2023 15:21:49 -0500 Subject: [PATCH 03/17] Update README.md --- README.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/README.md b/README.md index e69de29..66e1363 100644 --- a/README.md +++ b/README.md @@ -0,0 +1,9 @@ +## Data Sources + +|Data Store|Data Type|Sensitivity|Notes| +|----------|---------|-----------|-----| + +## Endpoint Connections + +|Endpoint|Purpose|Stage|Access| +|--------|-------|-----|------| From 5ea704c8e03e85e871c061fe8f1ff3ae244f176b Mon Sep 17 00:00:00 2001 From: "David D. Riddle" Date: Thu, 29 Jun 2023 14:47:09 -0500 Subject: [PATCH 04/17] Add LICENSE file (#16) Closes #11 --- LICENSE | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 LICENSE diff --git a/LICENSE b/LICENSE new file mode 100644 index 0000000..23fa39a --- /dev/null +++ b/LICENSE @@ -0,0 +1,35 @@ +University of Illinois/NCSA Open Source License + +Copyright (c) 2023 by the Board of Trustees of the University of +Illinois. All rights reserved. + +Developed by Cybersecurity and Technology Services +University of Illinois +https://techservices.illinois.edu + +Permission is hereby granted, free of charge, to any person +obtaining a copy of this software and associated documentation files +(the "Software"), to deal with the Software without restriction, +including without limitation the rights to use, copy, modify, merge, +publish, distribute, sublicense, and/or sell copies of the Software, +and to permit persons to whom the Software is furnished to do so, +subject to the following conditions: + +- Redistributions of source code must retain the above copyright notice, + this list of conditions and the following disclaimers. + +- Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimers in the + documentation and/or other materials provided with the distribution. + +- Neither the names of University of Illinois nor the names of its + contributors may be used to endorse or promote products derived from + this Software without specific prior written permission. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS +OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +CONTRIBUTORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS WITH +THE SOFTWARE. From 958007b405c11288e00d2575994c9dd078849ddb Mon Sep 17 00:00:00 2001 From: Edward Delaporte Date: Wed, 30 Aug 2023 11:20:15 -0500 Subject: [PATCH 05/17] Reminder updates For #8 --- .github/workflows/pr_reminder.yml | 28 +++++++++++++--------------- 1 file changed, 13 insertions(+), 15 deletions(-) diff --git a/.github/workflows/pr_reminder.yml b/.github/workflows/pr_reminder.yml index 2882e69..96dd4b3 100644 --- a/.github/workflows/pr_reminder.yml +++ b/.github/workflows/pr_reminder.yml @@ -1,38 +1,36 @@ -name: PR review reminders -on: - schedule: - # Every weekday at 8:30a CST / 14:30 UTC and 1:30p CST / 19:30 UTC - - cron: '30 14,19 * * 1-5' +name: PRs reviews reminder + +on: pull_request # temporarily for testing + + # schedule: + # # Every weekday every 2 hours during working hours (utc), send notification + # - cron: "0 13-22/2 * * 1-5" jobs: pr-reviews-reminder: runs-on: ubuntu-latest steps: - # https://github.com/DavideViolante/pr-reviews-reminder-action/releases - - uses: DavideViolante/pr-reviews-reminder-action@v2.6.0 + - uses: DavideViolante/pr-reviews-reminder-action@v1.6.1 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: webhook-url: ${{ secrets.TEAMS_WEBHOOK }} provider: 'msteams' - ignore-label: no-reminder - github-provider-map: >- + github-provider-map: > apetsche1:apetsche@illinois.edu, asvalent:asvalent@illinois.edu, baristaTam:buch1@illinois.edu, cstephns:cstephns@illinois.edu, ddriddle:ddriddle@illinois.edu, - edthedev:delaport@illinois.edu, + djl-illinois:djl@illinois.edu, + domeyerj:domeyerj@illinois.edu, + EdTheDev:delaport@illinois.edu, gshere:shere@illinois.edu, ktlack:klacker6@illinois.edu, livn46:rheren@illinois.edu, mabaumgartner:mab@illinois.edu, - mpitcel:mpitcel2@illinois.edu, - PrabhaManda:pmanda@illinois.edu, - rdonovan92:rdonovan@illinois.edu, - safletcher42:safletch@illinois.edu, + MichaelLeis:mleis@illinois.edu, spaldr:spaldr@illinois.edu, - spencer-sharp:swsharp@illinois.edu, tjuddill:tjudd@illinois.edu, wennebo1:wennebo1@illinois.edu, zdc217:zdc@illinois.edu From b073a05c5f570ea8e5bdbb94fc17166cd5541308 Mon Sep 17 00:00:00 2001 From: Edward Delaporte Date: Wed, 30 Aug 2023 11:21:47 -0500 Subject: [PATCH 06/17] Cleanup --- .github/workflows/pr_reminder.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/pr_reminder.yml b/.github/workflows/pr_reminder.yml index 96dd4b3..2ad9594 100644 --- a/.github/workflows/pr_reminder.yml +++ b/.github/workflows/pr_reminder.yml @@ -22,14 +22,12 @@ jobs: baristaTam:buch1@illinois.edu, cstephns:cstephns@illinois.edu, ddriddle:ddriddle@illinois.edu, - djl-illinois:djl@illinois.edu, domeyerj:domeyerj@illinois.edu, EdTheDev:delaport@illinois.edu, gshere:shere@illinois.edu, ktlack:klacker6@illinois.edu, livn46:rheren@illinois.edu, mabaumgartner:mab@illinois.edu, - MichaelLeis:mleis@illinois.edu, spaldr:spaldr@illinois.edu, tjuddill:tjudd@illinois.edu, wennebo1:wennebo1@illinois.edu, From 9237587c59cff81b47e926b98184653f1616e2f9 Mon Sep 17 00:00:00 2001 From: Edward Delaporte Date: Wed, 30 Aug 2023 11:24:02 -0500 Subject: [PATCH 07/17] Try 2.7.0, it's the new 2.6.x! --- .github/workflows/pr_reminder.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pr_reminder.yml b/.github/workflows/pr_reminder.yml index 2ad9594..927aeb0 100644 --- a/.github/workflows/pr_reminder.yml +++ b/.github/workflows/pr_reminder.yml @@ -10,7 +10,7 @@ jobs: pr-reviews-reminder: runs-on: ubuntu-latest steps: - - uses: DavideViolante/pr-reviews-reminder-action@v1.6.1 + - uses: DavideViolante/pr-reviews-reminder-action@v2.7.0 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: From 712092bccd65839eb53e79b9f71ef7455f42be14 Mon Sep 17 00:00:00 2001 From: Edward Delaporte Date: Wed, 30 Aug 2023 11:26:19 -0500 Subject: [PATCH 08/17] Back to CRON to prep for merge --- .github/workflows/pr_reminder.yml | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/.github/workflows/pr_reminder.yml b/.github/workflows/pr_reminder.yml index 927aeb0..9cf115f 100644 --- a/.github/workflows/pr_reminder.yml +++ b/.github/workflows/pr_reminder.yml @@ -1,10 +1,9 @@ name: PRs reviews reminder - -on: pull_request # temporarily for testing - - # schedule: - # # Every weekday every 2 hours during working hours (utc), send notification - # - cron: "0 13-22/2 * * 1-5" + +on: + schedule: + # Every weekday every 2 hours during working hours (utc), send notification + - cron: "0 13-22/2 * * 1-5" jobs: pr-reviews-reminder: From c92c5978d5c5125c574f02162776ccfa1228e006 Mon Sep 17 00:00:00 2001 From: Edward Delaporte Date: Wed, 30 Aug 2023 11:27:07 -0500 Subject: [PATCH 09/17] Fixup --- .github/workflows/pr_reminder.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/pr_reminder.yml b/.github/workflows/pr_reminder.yml index 9cf115f..01c539e 100644 --- a/.github/workflows/pr_reminder.yml +++ b/.github/workflows/pr_reminder.yml @@ -1,9 +1,9 @@ name: PRs reviews reminder -on: +on: schedule: - # Every weekday every 2 hours during working hours (utc), send notification - - cron: "0 13-22/2 * * 1-5" + # Every weekday at 8:30a CST / 14:30 UTC and 1:30p CST / 19:30 UTC + - cron: '30 14,19 * * 1-5' jobs: pr-reviews-reminder: From 9c06256a111b9084edeacae17abbdb5381759238 Mon Sep 17 00:00:00 2001 From: Edward Delaporte Date: Wed, 30 Aug 2023 13:33:06 -0500 Subject: [PATCH 10/17] Add user map variable for pull request reminders (#18) Co-authored-by: David Riddle Co-authored-by: Tyler Turner Co-authored-by: Zach Carrington --- .github/workflows/pr_reminder.yml | 18 ++---------------- 1 file changed, 2 insertions(+), 16 deletions(-) diff --git a/.github/workflows/pr_reminder.yml b/.github/workflows/pr_reminder.yml index 01c539e..e644177 100644 --- a/.github/workflows/pr_reminder.yml +++ b/.github/workflows/pr_reminder.yml @@ -15,19 +15,5 @@ jobs: with: webhook-url: ${{ secrets.TEAMS_WEBHOOK }} provider: 'msteams' - github-provider-map: > - apetsche1:apetsche@illinois.edu, - asvalent:asvalent@illinois.edu, - baristaTam:buch1@illinois.edu, - cstephns:cstephns@illinois.edu, - ddriddle:ddriddle@illinois.edu, - domeyerj:domeyerj@illinois.edu, - EdTheDev:delaport@illinois.edu, - gshere:shere@illinois.edu, - ktlack:klacker6@illinois.edu, - livn46:rheren@illinois.edu, - mabaumgartner:mab@illinois.edu, - spaldr:spaldr@illinois.edu, - tjuddill:tjudd@illinois.edu, - wennebo1:wennebo1@illinois.edu, - zdc217:zdc@illinois.edu + github-provider-map: ${{ vars.MAP_USERNAMES_TEAMS }} + From 5a01d9be66c5c68c642b45b5871cf9d5bfe5cc2d Mon Sep 17 00:00:00 2001 From: Zach Carrington Date: Mon, 11 Sep 2023 15:05:14 -0500 Subject: [PATCH 11/17] Add stale issue workflow (#19) Co-authored-by: David Riddle Co-authored-by: Edward Delaporte Co-authored-by: Michelle Pitcel Co-authored-by: Tyler Turner --- .github/workflows/cleanup.yml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 .github/workflows/cleanup.yml diff --git a/.github/workflows/cleanup.yml b/.github/workflows/cleanup.yml new file mode 100644 index 0000000..112738d --- /dev/null +++ b/.github/workflows/cleanup.yml @@ -0,0 +1,17 @@ +name: 'Close stale issues and pull requests' +on: + schedule: + # Daily at 1:30pm + - cron: '30 13 * * 1-5' + +jobs: + stale: + runs-on: ubuntu-latest + steps: + - uses: actions/stale@v8 + with: + stale-issue-message: 'This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 14 days.' + stale-pr-message: 'This pull request is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 14 days.' + days-before-stale: 60 + days-before-close: 14 + exempt-issue-labels: 'bug,requested' From a31c9d69ba599a3f125a36234047681a5c3baab5 Mon Sep 17 00:00:00 2001 From: Edward Delaporte Date: Fri, 2 May 2025 15:45:33 -0500 Subject: [PATCH 12/17] Update SECURITY.md Correction to template. --- SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index 716bec6..3eca2d4 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,7 +2,7 @@ ## Supported Versions -Patches for farmit will only be applied to the current release. +Patches for this solution will only be applied to the current release. ## Reporting a Bug or Vulnerability From 938156adf02214c14543c4595c83dd80b7f7e92c Mon Sep 17 00:00:00 2001 From: Edward Delaporte Date: Tue, 9 Dec 2025 15:06:14 -0600 Subject: [PATCH 13/17] Add end-of-life language to CHANGELOG --- CHANGELOG.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index fa9f93b..a136182 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,19 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +# End of Life + +This product is supported by Cybersecurity teams at the +University of Illinois Urbana-Champaign on a best-effort basis. + +As of the last update to this README, the expected End-of-Life and +End-of-Support dates of this product are . + +End-of-Life was decided upon based on these dependencies: + + - Date: Tue, 9 Dec 2025 15:12:13 -0600 Subject: [PATCH 14/17] Fixup Fix formatting --- CHANGELOG.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index a136182..d063258 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,4 +1,5 @@ # Changelog + All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), @@ -18,6 +19,9 @@ End-of-Life was decided upon based on these dependencies: - Date: Tue, 9 Dec 2025 15:18:01 -0600 Subject: [PATCH 15/17] Update SECURITY to use our vulnerability disclosure info page --- SECURITY.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index 3eca2d4..41c8710 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -5,7 +5,8 @@ Patches for this solution will only be applied to the current release. ## Reporting a Bug or Vulnerability + +Vulnerabilities can be responsibly disclosed through the contact information +found at [Cybersecurity Vulnerability Disclosure](https://go.illinois.edu/vulnerability). -Vulnerabilities can be responsibly disclosed to -[securitysupport@illinois.edu](mailto:securitysupport@illinois.edu). Bugs can be reported via repository issues. From 6428f24b1e39e3aeae59bd8aa2b9dbec51e84fcd Mon Sep 17 00:00:00 2001 From: Edward Date: Tue, 16 Dec 2025 15:42:20 -0600 Subject: [PATCH 16/17] Default EOL to README --- CHANGELOG.md | 12 ------------ README.md | 14 ++++++++++++++ 2 files changed, 14 insertions(+), 12 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index d063258..eafbb04 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,18 +5,6 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). -# End of Life - -This product is supported by Cybersecurity teams at the -University of Illinois Urbana-Champaign on a best-effort basis. - -As of the last update to this README, the expected End-of-Life and -End-of-Support dates of this product are . - -End-of-Life was decided upon based on these dependencies: - - - . + +End-of-Life was decided upon based on these dependencies: + + - + - + From d52a0e5935e8a6bafd8558c628342ba9c2dde3ab Mon Sep 17 00:00:00 2001 From: Edward Date: Tue, 16 Dec 2025 16:00:10 -0600 Subject: [PATCH 17/17] Add actual README content for this repo --- README.md | 26 +++++++++++++++++++++++--- 1 file changed, 23 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index b74bd05..18987b7 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,23 @@ +## About + +This repository is used by Cybersecurity operations teams at the +University of Illinois as a GitHub template. + +This resource helps comply with University of Illinois +Cybersecurity standards - including [IT-07][it07], [IT08][it08], +and [IT13][it13]. + +[it07]: https://go.illinois.edu/secstd-IT07 +[it08]: https://go.illinois.edu/secstd-IT08 +[it13]: https://go.illinois.edu/secstd-IT13 + +See [Cybersecurity Development on the Illinois Knowledge Base][kbsearch] +for information about our development standards. + +[kbsearch]: https://answers.uillinois.edu/illinois/search.php?q=cybersecurity+developer&cat=0 + +The remainder of this `README.md` contains example text. + ## Data Sources |Data Store|Data Type|Sensitivity|Notes| @@ -14,10 +34,10 @@ This product is supported by Cybersecurity teams at the University of Illinois Urbana-Champaign on a best-effort basis. As of the last update to this README, the expected End-of-Life and -End-of-Support dates of this product are . +End-of-Support dates of this product are . End-of-Life was decided upon based on these dependencies: - - - - + - + -