{"id":20993384,"url":"https://github.com/aws-quickstart/quickstart-trend-micro-cloudone-helm-resource-provider","last_synced_at":"2026-01-14T22:38:33.752Z","repository":{"id":42685720,"uuid":"370451834","full_name":"aws-quickstart/quickstart-trend-micro-cloudone-helm-resource-provider","owner":"aws-quickstart","description":"AWS Quick Start Team","archived":true,"fork":false,"pushed_at":"2022-03-28T15:25:10.000Z","size":51,"stargazers_count":2,"open_issues_count":1,"forks_count":1,"subscribers_count":7,"default_branch":"main","last_synced_at":"2025-09-30T17:48:59.430Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws-quickstart.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null}},"created_at":"2021-05-24T18:39:24.000Z","updated_at":"2024-12-10T20:24:13.000Z","dependencies_parsed_at":"2022-09-16T18:23:13.551Z","dependency_job_id":null,"html_url":"https://github.com/aws-quickstart/quickstart-trend-micro-cloudone-helm-resource-provider","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/aws-quickstart/quickstart-trend-micro-cloudone-helm-resource-provider","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws-quickstart%2Fquickstart-trend-micro-cloudone-helm-resource-provider","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws-quickstart%2Fquickstart-trend-micro-cloudone-helm-resource-provider/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws-quickstart%2Fquickstart-trend-micro-cloudone-helm-resource-provider/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws-quickstart%2Fquickstart-trend-micro-cloudone-helm-resource-provider/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws-quickstart","download_url":"https://codeload.github.com/aws-quickstart/quickstart-trend-micro-cloudone-helm-resource-provider/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws-quickstart%2Fquickstart-trend-micro-cloudone-helm-resource-provider/sbom","scorecard":{"id":219291,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws-quickstart/quickstart-trend-micro-cloudone-helm-resource-provider","commit":"f5eaa899c11bca0f56039b31d471483e6ceaf875"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":0,"reason":"Found 1/19 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating golang:1.14-alpine to golang:1.14-alpine@sha256:e196a762bd349b188d66c539354fc23f0e5a0178c214e6dfe4d7894c3c2753f1","Warn: pipCommand not pinned by hash: Dockerfile:5","Info:   0 out of   1 containerImage dependencies pinned","Info:   0 out of   1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws-quickstart/.github/SECURITY.md:1","Info: Found linked content: github.com/aws-quickstart/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws-quickstart/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws-quickstart/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 4 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":8,"reason":"2 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T02:11:05.001Z","repository_id":42685720,"created_at":"2025-08-17T02:11:05.002Z","updated_at":"2025-08-17T02:11:05.002Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28436687,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-14T22:37:52.437Z","status":"ssl_error","status_checked_at":"2026-01-14T22:37:31.496Z","response_time":107,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-19T07:14:42.728Z","updated_at":"2026-01-14T22:38:33.702Z","avatar_url":"https://github.com/aws-quickstart.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# TrendMicro::CloudOneContainer::Helm\n\nAn AWS CloudFormation resource type that deploys Trend Micro Cloud One Container Security into EKS clusters using helm.\n\n## Prerequisites\n\n### IAM role\nAn IAM role is used by CloudFormation to execute this resource type handler code.\nA CloudFormation template to create the exeecution role is available\n[here](./execution-role.template.yaml)\n\n### Create an EKS cluster and provide CloudFormation access to the Kubernetes API\nEKS clusters use IAM to allow access to the kubernetes API, as the CloudFormation resource types in this project\ninteract with the kubernetes API, the IAM execution role must be granted access to the kubernetes API. This can be done\nin one of two ways:\n* Create the cluster using CloudFormation: Currently there is no native way to manage EKS auth using CloudFormation\n  (+1 [this GitHub issue](https://github.com/aws/containers-roadmap/issues/554) to help prioritize native support).\n  For this reason we have published `AWSQS::EKS::Cluster`. Instructions on activation and usage can be found\n  [here](https://github.com/aws-quickstart/quickstart-amazon-eks-cluster-resource-provider/blob/main/README.md).\n* Manually: to allow this resource type to access the kubernetes API, follow the\n  [instructions in the EKS documentation](https://docs.aws.amazon.com/eks/latest/userguide/add-user-role.html) adding\n  the IAM execution role created above to the `system:masters` group. (Note: you can scope this down if you plan to use\n  the resource type to only perform specific operations on the kubernetes cluster)\n\n## Activating the resource type\nActivation can be done in one of the following ways: \n* [AWS console](https://console.aws.amazon.com/cloudformation/home?region=us-east-1#/registry/activate-extension?typeArn=arn:aws:cloudformation:us-east-1::type/resource/408988dff9e863704bcc72e7e13f8d645cee8311/TrendMicro-CloudOneContainer-Helm) \n* [AWS CLI](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/cloudformation/activate-type.html)\n* [API](https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ActivateType.html)\n\nNote that this must be done in each region you plan to use this resource type in.\n\n## Usage\nProperties and return values for the resource type are documented [here](./docs/README.md).\n\nDocumentation for the helm chart and it's values are available [here](https://github.com/trendmicro/cloudone-container-security-helm/blob/master/README.md).\n\n## Examples\n\n### Deploy Trend Micro Cloud One Container Security fetching credentials stored in AWS Secrets Manager\n```yaml\nAWSTemplateFormatVersion: \"2010-09-09\"\nResources:\n  CloudOneHelmRelease:\n    Type: \"TrendMicro::CloudOneContainer::Helm\"\n    Properties:\n      ClusterID: my-cluster-name\n      Name: trendmicro-cloudone\n      Namespace: trendmicro-cloudone\n      Values:\n        cloudOne.admissionController.apiKey: {{resolve:secretsmanager:cloudone-api:SecretString:api-key}}\n        cloudOne.runtimeSecurity.apiKey: {{resolve:secretsmanager:cloudone-api:SecretString:api-key}}\n        cloudOne.runtimeSecurity.secret: {{resolve:secretsmanager:cloudone-api:SecretString:api-secret}}\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Faws-quickstart%2Fquickstart-trend-micro-cloudone-helm-resource-provider","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Faws-quickstart%2Fquickstart-trend-micro-cloudone-helm-resource-provider","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Faws-quickstart%2Fquickstart-trend-micro-cloudone-helm-resource-provider/lists"}