-
-
Notifications
You must be signed in to change notification settings - Fork 21
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #297 from georchestra/georchestra-gn4.4.5-rebase
Georchestra gn4.4.5 rebase
- Loading branch information
Showing
1,297 changed files
with
72,566 additions
and
39,611 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,4 @@ | ||
| # These are supported funding model platforms | ||
|
|
||
| github: [osgeo] | ||
| cusotm: ['https://github.com/geonetwork/core-geonetwork/wiki#financial-support','https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=LDTWEL3XKUVU8&source=url','https://www.osgeo.org/about/how-to-become-a-sponsor/'] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,27 @@ | ||
|
|
||
| <!--Include a few sentences describing the overall goals for this Pull Request--> | ||
|
|
||
| <!-- Please help our volunteers reviewing this PR by completing the following items. | ||
| Ask in a comment if you have troubles with any of them. --> | ||
|
|
||
| # Checklist | ||
|
|
||
| - [ ] I have read the [contribution guidelines](https://github.com/geonetwork/core-geonetwork/blob/main/CONTRIBUTING.md) | ||
| - [ ] *Pull request* provided for `main` branch, backports managed with label | ||
| - [ ] *Good housekeeping* of code, cleaning up comments, tests, and documentation | ||
| - [ ] *Clean commit history* broken into understandable chucks, avoiding big commits with hundreds of files, cautious of reformatting and whitespace changes | ||
| - [ ] *Clean commit message*s, longer verbose messages are encouraged | ||
| - [ ] *API Changes* are identified in commit messages | ||
| - [ ] *Testing* provided for features or enhancements using [automatic tests](https://github.com/geonetwork/core-geonetwork/blob/main/software_development/TESTING.md) | ||
| - [ ] *User documentation* provided for new features or enhancements in [manual](https://github.com/geonetwork/core-geonetwork/tree/main/docs/manual) | ||
| - [ ] *Build documentation* provided for development instructions in `README.md` files | ||
| - [ ] *Library management* using `pom.xml` dependency management. Update build documentation with intended library use and library tutorials or documentation | ||
|
|
||
| <!--Submitting the PR does not require you to check all items, but by the time it gets merged, they should be either satisfied or not applicable.--> | ||
|
|
||
| <!-- If you can, it's better to give credits to organisation supporting this work: | ||
| - `Funded by NAME` | ||
| - `Funded by URL` | ||
| - `Funded by NAME URL` | ||
| --> | ||
|
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,72 @@ | ||
| # This workflow uses actions that are not certified by GitHub. They are provided | ||
| # by a third-party and are governed by separate terms of service, privacy | ||
| # policy, and support documentation. | ||
|
|
||
| name: Scorecard supply-chain security | ||
| on: | ||
| # For Branch-Protection check. Only the default branch is supported. See | ||
| # https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection | ||
| branch_protection_rule: | ||
| # To guarantee Maintained check is occasionally updated. See | ||
| # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained | ||
| schedule: | ||
| - cron: '26 10 * * 5' | ||
| push: | ||
| branches: [ "main" ] | ||
|
|
||
| # Declare default permissions as read only. | ||
| permissions: read-all | ||
|
|
||
| jobs: | ||
| analysis: | ||
| name: Scorecard analysis | ||
| runs-on: ubuntu-latest | ||
| permissions: | ||
| # Needed to upload the results to code-scanning dashboard. | ||
| security-events: write | ||
| # Needed to publish results and get a badge (see publish_results below). | ||
| id-token: write | ||
| # Uncomment the permissions below if installing in a private repository. | ||
| # contents: read | ||
| # actions: read | ||
|
|
||
| steps: | ||
| - name: "Checkout code" | ||
| uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0 | ||
| with: | ||
| persist-credentials: false | ||
|
|
||
| - name: "Run analysis" | ||
| uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1 | ||
| with: | ||
| results_file: results.sarif | ||
| results_format: sarif | ||
| # (Optional) "write" PAT token. Uncomment the `repo_token` line below if: | ||
| # - you want to enable the Branch-Protection check on a *public* repository, or | ||
| # - you are installing Scorecard on a *private* repository | ||
| # To create the PAT, follow the steps in https://github.com/ossf/scorecard-action#authentication-with-pat. | ||
| # repo_token: ${{ secrets.SCORECARD_TOKEN }} | ||
|
|
||
| # Public repositories: | ||
| # - Publish results to OpenSSF REST API for easy access by consumers | ||
| # - Allows the repository to include the Scorecard badge. | ||
| # - See https://github.com/ossf/scorecard-action#publishing-results. | ||
| # For private repositories: | ||
| # - `publish_results` will always be set to `false`, regardless | ||
| # of the value entered here. | ||
| publish_results: true | ||
|
|
||
| # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF | ||
| # format to the repository Actions tab. | ||
| - name: "Upload artifact" | ||
| uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 | ||
| with: | ||
| name: SARIF file | ||
| path: results.sarif | ||
| retention-days: 5 | ||
|
|
||
| # Upload the results to GitHub's code scanning dashboard. | ||
| - name: "Upload to code-scanning" | ||
| uses: github/codeql-action/upload-sarif@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # v2.2.4 | ||
| with: | ||
| sarif_file: results.sarif |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1 @@ | ||
| docs.geonetwork-opensource.org |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,6 @@ | ||
| * Proposal for a Process for Deprecation (draft) | ||
|
|
||
| # Feature deprecation process | ||
|
|
||
| This page describes considerations and steps to take when removing a product feature. This is the process of depreciation or 'deprecating a feature'. | ||
|
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,29 +1,35 @@ | ||
| # GeoNetwork Open-source | ||
| # GeoNetwork opensource | ||
|
|
||
| # Build Health | ||
| ## Build Health | ||
|
|
||
| [](https://github.com/geonetwork/core-geonetwork/actions/workflows/linux.yml?query=branch%3Amain) | ||
|
|
||
| # Features | ||
| ## Features | ||
|
|
||
| * Immediate search access to local and distributed geospatial catalogues | ||
| * Uploading and downloading of data, graphics, documents, pdf files and any other content type | ||
| * An interactive Web Map Viewer to combine Web Map Services from distributed servers around the world | ||
| * Online editing of metadata with a powerful template system | ||
| * Scheduled harvesting and synchronization of metadata between distributed catalogs | ||
| * Support for OGC-CSW 2.0.2 ISO Profile, OAI-PMH, SRU protocols | ||
| * Support for OGC-CSW 2.0.2, ISO 1911x and DCAT-AP metadata profiles, OAI-PMH, SRU protocols | ||
| * Fine-grained access control with group and user management | ||
| * Multi-lingual user interface | ||
|
|
||
| # Documentation | ||
| ## Documentation | ||
|
|
||
| User documentation is managed in the [geonetwork/doc](https://github.com/geonetwork/doc) repository covering all releases of GeoNetwork. | ||
| The GeoNetwork Manual and Online Help are included in the `docs/manual` folder. This content is compiled into html pages during a release for a publishing on docs.geonetwork-opensource.org website. | ||
|
|
||
| The `docs` folder includes [geonetwork/doc](https://github.com/geonetwork/doc) as a git submodule. This documentation is compiled into html pages during a release for publishing on the [geonetwork-opensource.org](https://www.geonetwork-opensource.org) website. | ||
| * [docs.geonetwork-opensource.org](https://docs.geonetwork-opensource.org) | ||
|
|
||
| Developer documentation located in README.md files in the code-base: | ||
| The online help is compiled into html pages during a release and is included in the `war` web archive. | ||
|
|
||
| * General documentation for the project as a whole is in this README.md | ||
| * [Software Development Documentation](/software_development/) provides instructions for setting up a development environment, building GeoNetwork, compiling user documentation, and making a releases | ||
| * Module specific documentation can be found in each module (assuming there is module specific documentation required) | ||
| ## Developer Documentation | ||
|
|
||
| Developer documentation located in ``README.md`` files in the code-base: | ||
|
|
||
| * General documentation for the project as a whole is in this [README.md](README.md) | ||
| * [Software Development Documentation](/software_development/) provides instructions for setting up a development environment, building GeoNetwork, compiling user documentation, and making a releases. | ||
| * Module specific documentation can be found in each module: | ||
|
|
||
| ## Open Source Security Foundation (OpenSSF) best practices status | ||
| [](https://www.bestpractices.dev/projects/8626) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -2,7 +2,7 @@ | |
|
|
||
| The GeoNetwork community takes the security of the software and all services based on the software product seriously. On this page you can find the versions for which the community provides security patches. | ||
|
|
||
| If you believe you have found a security vulnerability in the software or an implementation of the software, please report it to [email protected] as described below. Do not publish the vulnerability in any public forums (such as Twitter/X, email list or issue tracker). | ||
| If you believe you have found a security vulnerability in the software or an implementation of the software, please report it [here](https://github.com/geonetwork/core-geonetwork/security/advisories/new) as described below. Do not publish the vulnerability in any public forums (such as Twitter/X, email list or issue tracker). | ||
|
|
||
| ## Supported Versions | ||
|
|
||
|
|
@@ -11,20 +11,20 @@ Each GeoNetwork release is supported with bug fixes for a limited period, with p | |
| - We recommend to update to latest incremental release as soon as possible to address security vulnerabilities. | ||
| - Some overlap is provided when major versions are announced with both a current version and a maintenance version being made available to provide time for organizations to upgrade. | ||
|
|
||
| | Version | Supported | Comment | | ||
| |-------------|--------------------|-------------------------| | ||
| | 4.2.x | :white_check_mark: | Current version | | ||
| | 4.0.x | :white_check_mark: | Maintenance version | | ||
| | 3.12.x | :white_check_mark: | Maintenance version | | ||
| | Version | Supported | Comment | | ||
| |---------|--------------------|---------------------| | ||
| | 4.4.x | :white_check_mark: | Latest version | | ||
| | 4.2.x | :white_check_mark: | Stable version | | ||
| | 3.12.x | :white_check_mark: | Maintenance version | | ||
|
|
||
| If your organisation is making use of a GeoNetwork version that is no longer in use by the community all is not lost. You can volunteer on the developer list to make additional releases, or engage with one of our [Commercial Support](https://www.osgeo.org/service-providers/?p=geonetwork) providers. | ||
|
|
||
| ## Reporting a Vulnerability | ||
|
|
||
| If you encounter a security vulnerability in GeoNetwork please take care to report in a responsible fashion: | ||
|
|
||
| * Keep exploit details out of mailing list and issue tracker (send details to the Project Steering Committee via [email protected]) | ||
| * Keep exploit details out of mailing list and issue tracker (instead provide details to the Project Steering Committee via the GitHub [Report a vulnerability](https://github.com/geonetwork/core-geonetwork/security/advisories/new) option link at the top of this page or send an email to [email protected]) | ||
| * Be prepared to work with community members on a solution | ||
| * Keep in mind community members are volunteers and an extensive fix may require fundraising / resources | ||
| * Keep in mind that community members are volunteers and an extensive fix may require fundraising / resources | ||
|
|
||
| For more information see [How to contribute](https://github.com/geonetwork/core-geonetwork/wiki/How-to-contribute). | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.