Shared code between all flavors of AppSec Go (in-tracer, serverless, etc...). Meant for internal use.
  • Go 98.3%
  • Shell 1%
  • Dockerfile 0.7%
Find a file
Ramy Elkest f9cc781106
chore: remove update-rules workflow (repo deprecated) (#72)
## Summary

This repo is deprecated (last real commit: Aug 2025). Instead of
migrating the `update-rules.yml` workflow from
`DD_K9_LIBRARY_GO_APP_PRIVATE_KEY` to dd-octo-sts, simply remove the
workflow entirely.

This eliminates the dependency on the shared secret, which is the goal
of the migration effort.

## Changes
- Deleted `.github/workflows/update-rules.yml` (scheduled rule updater)

## Notes
- The `appsec-internal-go.github.read-rules.sts.yaml` policy in
appsec-event-rules (merged in DataDog/appsec-event-rules#281) is now
unused but harmless to leave
- After merge, the `DD_K9_LIBRARY_GO_APP_PRIVATE_KEY` secret can be
removed from this repo's settings

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---
Jira: APPSEC-62083

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
History 2026-04-03 11:03:57 +02:00
.github chore: remove update-rules workflow (repo deprecated) (#72) 2026-04-03 11:03:57 +02:00
_tools/rules-updater chore: use GitHub App instead of PAT (#50) 2025-06-06 14:04:11 +00:00
apisec feat: proxy sampler (#52) 2025-06-26 16:17:39 +02:00
appsec Update embedded AppSec Rules to 1.15.1 (#55) 2025-08-14 13:53:20 +00:00
httpsec httpsec: externalize ClientIP() (#5) 2023-04-05 14:48:34 +02:00
limiter feat: proxy sampler (#52) 2025-06-26 16:17:39 +02:00
log log: stop using datadog-agent/pkg/util/log package (#14) 2023-12-07 15:58:02 +01:00
netip chore: remove inet.af (#21) 2024-02-13 08:14:30 +00:00
CODEOWNERS chore: add CODEOWNER file (#25) 2024-03-21 10:58:24 +01:00
go.mod fix: un-do breaking changes from v1.10.0 (#40) 2025-04-02 09:52:29 +00:00
go.sum apisec: new sampler implementation (#39) 2025-04-02 11:01:40 +02:00
LICENSE init: add LICENSE 2023-02-15 09:30:41 +01:00
README.md add workflow to update embedded AppSec rules (#15) 2023-12-11 15:02:54 +01:00

github.com/DataDog/appsec-internal-go

This repository hosts a go module that provides shared implementations for internal details of various DataDog libraries and agents. This module is not intended to be used directly by end-users.

Updating embedded Rules

Embedded rules (at appsec/rules.json) are updated by the _tools/rules-updater/update.sh script. A GitHub Workflow named Update AppSec Rules can be used to perform this task entirely from the GitHub Web UI.

The GitHub Workflow runs automatically on a weekly basis (relatively early on Monday morning), so manual intervention (beyond reviewing and merging the PR created by the scheduled execution) should not be needed unless rules need to be updated without waiting for the next Monday.