Adding security_pr_scanner.yml for security checks.

.github/workflows/release.yaml

@@ -1,7 +1,8 @@
 name: Java CI
-
-on: [workflow_dispatch]
-
+on:
+  push:
+    tags:
+      - 'v*'
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -14,10 +15,11 @@ jobs:
           java-version: '8'
           distribution: 'adopt'
       - name: Build with Maven
-        run: mvn --batch-mode --update-snapshots verify
+        run: mvn -Drevision=${{github.ref_name}}  --batch-mode --update-snapshots verify
       - uses: jfrog/setup-jfrog-cli@v1
-        env:
-          JF_ARTIFACTORY_1: ${{ secrets.ARTIFACTORY_ACCESS_KEY }}
       - run: |
-           # Ping the server
-           jfrog rt ping
+           mkdir ${{github.ref_name}}
+           cp target/*.jar ${{github.ref_name}}/.
+           jfrog rt u "${{github.ref_name}}/*.jar" akeyless-java/io/akeyless/cloudid/${{github.ref_name}}/  --url=https://akeyless.jfrog.io/artifactory --user=ci-user --password=${{ secrets.ARTIFACTORY_ACCESS_KEY }}
+           sed "s/\${revision}/${{github.ref_name}}/g" pom.xml >> target/cloudid-${{github.ref_name}}.pom
+           jfrog rt u "${{github.ref_name}}/*.pom" akeyless-java/io/akeyless/cloudid/${{github.ref_name}}/  --url=https://akeyless.jfrog.io/artifactory --user=ci-user --password=${{ secrets.ARTIFACTORY_ACCESS_KEY }}

.github/workflows/security_pr_scanner.yml

@@ -0,0 +1,17 @@
+name: Security PR Scan
+
+on: [pull_request]
+
+jobs:
+  Scanning_with:
+    uses: akeylesslabs/akeyless-security/.github/workflows/reusable-scanner.yaml@main
+    strategy:
+      fail-fast: false
+      matrix:
+        scan_type: ["SAST", "SCA"]
+    with:
+      branch_name: ${{ github.head_ref }}
+      repository_name: ${{ github.repository }}
+      event_name: ${{ github.event_name }}
+      scan_type: ${{ matrix.scan_type }}
+    secrets: inherit

README.md

@@ -0,0 +1,105 @@
+# akeyless-java-cloud-id
+
+Akeyless CloudId Provider
+
+The purpose of this package is to exteact the required "cloudid" to authenticate to akeyless using cloud authorization providers.
+
+For more information, please visit [http://akeyless.io](http://akeyless.io)
+
+## Publishing a new version
+Tag the commit with a new tag and push to the repository.
+The workflow will build and publish a new version to the artifactory repository.
+
+## Requirements
+
+Using the cloudid provider requires:
+1. Java 1.8+
+2. Maven/Gradle
+
+## Installation
+
+### Maven users
+
+Add the following repository definition to your Maven settings file (default
+`~/.m2/settings.xml`) or your POM file:
+
+```xml
+<repository>
+    <id>central</id>
+    <url>https://akeyless.jfrog.io/artifactory/akeyless-java</url>
+    <snapshots><enabled>false</enabled></snapshots>
+</repository>
+```
+
+Add this dependency to your project's POM:
+
+```xml
+<dependency>
+  <groupId>io.akeyless</groupId>
+  <artifactId>cloudid</artifactId>
+  <version>Specify the CloudId package version here</version>
+</dependency>
+```
+To use akeyless java sdk, you should also add:
+```xml
+ <dependency>
+    <groupId>io.akeyless</groupId>
+    <artifactId>akeyless-java</artifactId>
+    <version>Specify the SDK version here</version>
+</dependency>
+```
+
+## Getting Started
+
+Please follow the [installation](#installation) instruction and execute the following Java code:
+
+```java
+import io.akeyless.client.ApiException;
+import io.akeyless.cloudid.CloudProviderFactory;
+import io.akeyless.cloudid.CloudIdProvider;
+
+import io.akeyless.client.ApiClient;
+import io.akeyless.client.Configuration;
+import io.akeyless.client.model.*;
+import io.akeyless.client.api.V2Api;
+
+public class Main {
+    public static void main(String[] argv) {
+        // Use azure_ad/aws_iam/gcp, according to your cloud provider
+        String accessType = "azure_ad";
+        CloudIdProvider idProvider = CloudProviderFactory.getCloudIdProvider(accessType);
+        try {
+            String cloudId = idProvider.getCloudId();
+
+            ApiClient client = Configuration.getDefaultApiClient();
+            client.setBasePath("https://api.akeyless.io");
+
+            V2Api api = new V2Api(client);
+            Auth auth = new Auth();
+            auth.accessId("<Your auth method access id>");
+            auth.accessType(accessType);
+            auth.cloudId(cloudId);
+
+            AuthOutput result = api.auth(auth);
+
+
+            ListItems listBody = new ListItems();
+            listBody.setToken(result.getToken());
+            ListItemsInPathOutput listOut = api.listItems(listBody);
+            System.out.println(listOut.getItems().size());
+        } catch (ApiException e) {
+            System.err.println("Status code: " + e.getCode());
+            System.err.println("Reason: " + e.getResponseBody());
+            System.err.println("Response headers: " + e.getResponseHeaders());
+            e.printStackTrace();
+        } catch (Exception e) {
+            System.err.println("Reason: " + e.getMessage());
+            e.printStackTrace();
+        }
+    }
+}
+ ```
+
+## Author
+support@akeyless.io
+

cloudid.iml

@@ -1,5 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <module org.jetbrains.idea.maven.project.MavenProjectsManager.isMavenModule="true" type="JAVA_MODULE" version="4">
+  <component name="Go" enabled="true" />
   <component name="NewModuleRootManager" LANGUAGE_LEVEL="JDK_1_8">
     <output url="file://$MODULE_DIR$/target/classes" />
     <output-test url="file://$MODULE_DIR$/target/test-classes" />

pom.xml

@@ -3,10 +3,9 @@
          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
          xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
     <modelVersion>4.0.0</modelVersion>
-
     <groupId>io.akeyless</groupId>
     <artifactId>cloudid</artifactId>
-    <version>0.1.0</version>
+    <version>${revision}</version>
     <packaging>jar</packaging>
     <name>akeyless-cloud-id</name>
     <url>https://github.com/akeylesslabs/akeyless-java-cloud-id</url>
@@ -31,6 +30,7 @@
 
 
     <properties>
+        <fasterxml_version>2.14.0</fasterxml_version>
         <maven.compiler.source>8</maven.compiler.source>
         <maven.compiler.target>8</maven.compiler.target>
     </properties>
@@ -43,18 +43,39 @@
             <version>1.5.3</version>
         </dependency>
 
-        <!-- https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-core -->
+        <!-- https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind -->
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
-            <artifactId>jackson-core</artifactId>
-            <version>2.13.1</version>
+            <artifactId>jackson-databind</artifactId>
+            <version>${fasterxml_version}</version>
+        </dependency>
+
+        <!-- https://mvnrepository.com/artifact/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor -->
+        <dependency>
+            <groupId>com.fasterxml.jackson.dataformat</groupId>
+            <artifactId>jackson-dataformat-cbor</artifactId>
+            <version>${fasterxml_version}</version>
         </dependency>
 
         <!-- https://mvnrepository.com/artifact/com.amazonaws/aws-java-sdk-core -->
         <dependency>
             <groupId>com.amazonaws</groupId>
             <artifactId>aws-java-sdk-core</artifactId>
             <version>1.12.169</version>
+            <exclusions>
+              <exclusion>
+                <groupId>com.fasterxml.jackson.core</groupId>
+                <artifactId>jackson-core</artifactId>
+              </exclusion>
+            <exclusion>
+                <groupId>com.fasterxml.jackson.core</groupId>
+                <artifactId>jackson-databind</artifactId>
+            </exclusion>
+            <exclusion>
+                <groupId>com.fasterxml.jackson.dataformat</groupId>
+                <artifactId>jackson-dataformat-cbor</artifactId>
+            </exclusion>
+          </exclusions>
         </dependency>
    </dependencies>
 
@@ -65,4 +86,27 @@
             <url>https://akeyless.jfrog.io/artifactory/akeyless-java</url>
         </repository>
     </distributionManagement>
+
+    <build>
+        <plugins>
+            <!-- any other plugins -->
+            <plugin>
+                <artifactId>maven-assembly-plugin</artifactId>
+                <executions>
+                    <execution>
+                        <phase>package</phase>
+                        <goals>
+                            <goal>single</goal>
+                        </goals>
+                    </execution>
+                </executions>
+                <configuration>
+                    <descriptorRefs>
+                        <descriptorRef>jar-with-dependencies</descriptorRef>
+                    </descriptorRefs>
+                    <appendAssemblyId>false</appendAssemblyId>
+                </configuration>
+            </plugin>
+        </plugins>
+    </build>
 </project>

src/main/java/io/akeyless/AwsCloudIdProvider.java → src/main/java/io/akeyless/cloudid/AwsCloudIdProvider.java

@@ -1,4 +1,4 @@
-package io.akeyless;
+package io.akeyless.cloudid;
 
 import com.amazonaws.DefaultRequest;
 import com.amazonaws.auth.AWS4Signer;

src/main/java/io/akeyless/AzureCloudIdProvider.java → src/main/java/io/akeyless/cloudid/AzureCloudIdProvider.java

@@ -1,4 +1,4 @@
-package io.akeyless;
+package io.akeyless.cloudid;
 
 import java.io.InputStream;
 import java.net.HttpURLConnection;

src/main/java/io/akeyless/CloudIdProvider.java → src/main/java/io/akeyless/cloudid/CloudIdProvider.java

@@ -1,4 +1,4 @@
-package io.akeyless;
+package io.akeyless.cloudid;
 
 public interface CloudIdProvider {
     String getCloudId() throws Exception;

src/main/java/io/akeyless/CloudProviderFactory.java → src/main/java/io/akeyless/cloudid/CloudProviderFactory.java

@@ -1,4 +1,4 @@
-package io.akeyless;
+package io.akeyless.cloudid;
 
 import java.util.Objects;
 

src/main/java/io/akeyless/GcpCloudIdProvider.java → src/main/java/io/akeyless/cloudid/GcpCloudIdProvider.java

@@ -1,12 +1,11 @@
-package io.akeyless;
+package io.akeyless.cloudid;
 
 import  com.google.auth.oauth2.IdToken;
 import  com.google.auth.oauth2.IdTokenCredentials;
 import  com.google.auth.oauth2.IdTokenProvider;
 import  com.google.auth.oauth2.GoogleCredentials;
 
 import java.nio.charset.StandardCharsets;
-import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Base64;