Have jenkins run "drush secrev" on every live site and mail output to security@d.o on a regular basis [#2055667]

Comment #1

he/him

CreditAttribution: coltrane commented 1 August 2013 at 15:25

+1 to this. Let me know if I can help at all. So far the output is minimal but if it's super helpful to expand it I can.

Here's output for one my D7 sites.
drush --nocolor secrev

Text formats                                                           [success]
Content                                                                  [error]
Error reporting                                                          [error]
Private files                                                            [error]
Allowed upload extensions                                              [success]
Drupal permissions                                                     [success]
Executable PHP                                                         [success]
Drupal base URL                                                          [error]
Temporary files                                                          [error]

(Edited to remove stderr redirection)

Log in or register to post comments

Comment #2

mlhess CreditAttribution: mlhess commented 1 August 2013 at 16:30

Assigned:

Unassigned

» mlhess

Do we want to make this Jenkins job and run it once a (month?)

Michael

Log in or register to post comments

Comment #3

greggles

he/him

English

Denver, Colorado, USA

CreditAttribution: greggles commented 1 August 2013 at 16:38

Title:

Run "drush secrev" on every live site and mail output to security@d.o

» Have jenkins run "drush secrev" on every live site and mail output to security@d.o on a regular basis

Yes, sorry if that wasn't clear. I think every day.

Log in or register to post comments

Comment #4

greggles

he/him

English

Denver, Colorado, USA

CreditAttribution: greggles commented 12 August 2013 at 20:53

Got a job setup with a few sites commented out: http://localhost:8080/job/secrev

Association fails with:

CiviCRM does not have permission to write temp files in /var/www/association.drupal.org/civicrm-files/templates_c/en_US/, ExitingDrush command terminated abnormally due to an unrecoverable error. [error]

The module is missing from:

* localize
* portland
* qa
* security.d.o (how embarrassing!)

I tried to enable it on security.d.o but there was some problem with deployment: http://localhost:8080/view/Security/job/deploy_security.drupal.org/65/co...

The job is set to mail coltrane and me and will run "H H * * *" (i.e. daily).

Right now there are a few false-positive failures.

Oddly enough it marks a build as succeeding even with an error like:

"Comments [error]"

I thought drush_print with an error would raise an error exit code. no?