Dean Wilson deanwilson
deanwilson
/ .pre-commit-config.yaml
Last active
January 13, 2026 23:59
File extension restrictions in pre-commit
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| repos: | |
| - repo: local | |
| hooks: | |
| - id: restricted-filenames | |
| name: Check commits for unexpected file extensions | |
| entry: These file extensions are unusual and should be checked | |
| language: fail | |
| files: '.*\.(xlsx|doc)' | |
| - id: restricted-file-types | |
| name: Check commits for unexpected file types |
deanwilson
/ gist:1f156e2537319486b3ee2accb72d62a4
Last active
June 5, 2020 09:15
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ## command | |
| conftest test -i ini samples/multiple-repos-broken.repo | |
| ## Policy | |
| cat policy/yum-repo-security-settings.rego | |
| package main | |
| deny[msg] { | |
| reponame := input[_] # gets the contents of the structure, not the [foo] value. | |
| not input[reponame].gpgcheck = 1 |
deanwilson
/ gds-way-docker.rego
Created
July 7, 2020 18:09
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| package main | |
| deny[msg] { | |
| input[i].Cmd == "from" | |
| val := input[i].Value | |
| image := val[0] | |
| trace(image) | |
| not re_match(".+@sha256:.{64}$", image) |
deanwilson
/ main.tf
Created
July 16, 2020 11:28
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ## cat main.tf | |
| variable "vpc_id" { | |
| type = string | |
| description = "VPC ID to deploy to" | |
| validation { | |
| #condition = can(regex("^vpc-", var.vpc_id)) | |
| condition = length(var.vpc_id) > 4 && substr(var.vpc_id, 0, 4) == "vpc-" | |
| error_message = "The vpc_id must be a valid VPC ID of the form 'vpc-'." |
deanwilson
/ main.rs
Created
August 13, 2020 09:38
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| extern crate rand; | |
| use rand::Rng; | |
| use std::cmp::Ordering; | |
| use std::io; | |
| fn main() { | |
| println!("Guess the number!"); | |
| let secret_number = rand::thread_rng().gen_range(1, 101); |
deanwilson
/ bad-ips
Last active
December 20, 2020 23:33
SSH Bruteforces against a non-standard SSH port
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 1.0.212.34 | |
| 1.179.185.50 | |
| 1.186.57.150 | |
| 1.194.238.187 | |
| 1.202.76.226 | |
| 1.202.77.210 | |
| 1.209.229.179 | |
| 1.214.156.164 | |
| 1.214.220.227 | |
| 1.214.245.27 |
deanwilson
/ gist:c2aa8268ed311aa75ad80c983b4ee840
Created
November 24, 2020 16:41
IPSet to block todays SSH Bruteforce attempting IP addresses
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| cat ipset-fail2ban | |
| ipset -N fail2ban-2020-11-24 iphash | |
| ipset -A fail2ban-2020-11-24 1.0.212.34 | |
| ipset -A fail2ban-2020-11-24 1.186.57.150 | |
| ipset -A fail2ban-2020-11-24 1.202.76.226 | |
| ipset -A fail2ban-2020-11-24 1.214.220.227 | |
| ipset -A fail2ban-2020-11-24 1.245.61.144 | |
| ipset -A fail2ban-2020-11-24 2.184.52.194 | |
| ipset -A fail2ban-2020-11-24 2.228.87.194 |
deanwilson
/ gist:aef95eb26f3aa43c1a259c4f7d38a0b1
Created
December 6, 2020 14:52
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| git clone https://github.com/alphagov/govuk-puppet.git | |
| cd govuk-puppet/ | |
| git log --format=format: --name-only --since=18.month | egrep -v '^$' | sort | uniq -c | sort -nr | head -15 | |
| 198 hieradata/common.yaml | |
| 178 hieradata_aws/common.yaml | |
| 151 hieradata_aws/integration.yaml | |
| 143 Rakefile | |
| 123 hieradata_aws/staging.yaml | |
| 114 hieradata_aws/production.yaml |
deanwilson
/ gist:46c962c09a8ac9bcdbe61acf057c153b
Created
May 11, 2022 08:04
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| pdk build | |
| pdk (INFO): This module is not compatible with PDK, so PDK can not validate or test this build. Unvalidated modules may have errors when uploading to the Forge. To make this module PDK compatible and use validate features, cancel the build and run `pdk convert`. | |
| Continue build without converting? no | |
| pdk (INFO): Build cancelled; exiting. | |
| $ pdk convert | |
| ------------Files to be added----------- |
OlderNewer