Google Git
Sign in
apache/cloudstack-cloudmonkey/refs/heads/main
commit
de36f6dac98bca8f98f1536ef4b477a10ab7cbb1
[log]
author
Jarek Potiuk <jarek@potiuk.com>
Mon Jul 13 10:12:18 2026 +0200
committer
GitHub <noreply@github.com>
Mon Jul 13 13:42:18 2026 +0530
tree
0de139cb33bbd11fb565c6ca818f13b8b1cc7197
parent
5c41689a68fd0f126f391d402ff52d4558c4cec4 [diff]
Add security-model discoverability pointer to the project-wide CloudStack threat model (#212)

* Add draft project security threat-model document

Adds a draft project-level security threat-model document
(draft-THREAT-MODEL.md) at repo root, improving discoverability
for automated security scanners running against this repository.
The file follows the rubric format used by several other ASF
projects piloting security-model discoverability.

The "draft-" prefix signals this is a proposal for the PMC to
review, correct, or reject — not a finalised maintainer-blessed
model. Every claim carries a provenance tag (documented /
inferred / maintainer) so reviewers can see where each claim
originates; §14 collects open questions for the maintainers.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* Point to the project-wide CloudStack threat model instead of a per-repo copy

Drop the standalone draft-THREAT-MODEL.md and wire the discoverability chain
AGENTS.md -> SECURITY.md -> the project-wide model in apache/cloudstack
(apache/cloudstack#13293), so scanners find one canonical model and this repo
inherits it rather than duplicating it.

Generated-by: Claude Code

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Co-authored-by: dahn <daan.hoogland@gmail.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2 files changed
tree: 0de139cb33bbd11fb565c6ca818f13b8b1cc7197
  1. .github/
  2. cli/
  3. cmd/
  4. config/
  5. snap/
  6. vendor/
  7. .asf.yaml
  8. .gitignore
  9. .rat-excludes
  10. AGENTS.md
  11. CHANGES.md
  12. cmk.go
  13. Dockerfile
  14. go.mod
  15. go.sum
  16. LICENSE
  17. Makefile
  18. performrelease.sh
  19. README.md
  20. SECURITY.md
README.md

CloudMonkey Build Status RAT Check Lint Check cloudmonkey

cloudmonkey :cloud::monkey_face: is a command line interface (CLI) for Apache CloudStack. It can be used both as an interactive shell and as a command-line tool, simplifying Apache CloudStack configuration and management.

The modern CloudMonkey is a rewritten and simplified port in Go, compatible with Apache CloudStack 4.9 and above. The legacy cloudmonkey written in Python can be used with Apache CloudStack 4.0-incubating and above.

For documentation, kindly see the wiki.

Development

To develop CloudMonkey, you need Go 1.11 or later and a unix-like environment. You can use the following targets for building:

$ make help

  all             Build program binary
  test-bench      Run benchmarks
  test-short      Run only short tests
  test-verbose    Run tests in verbose mode with coverage reporting
  test-race       Run tests with race detector
  check tests     Run tests
  test-xml        Run tests with xUnit output
  test-coverage   Run coverage tests
  debug           Runs a debuggable binary using dlv
  lint            Run golint
  fmt             Run gofmt on all source files

Build and run:

$ make run

Build and run manually:

$ make all
$ ./bin/cmk

To build for all distros and platforms, run:

$ make dist

Community

You may join the relevant mailing list(s) for cloudmonkey related discussion:

Development Mailing List

Users Mailing List

Contribution

Discuss issue(s) and feature(s) on CloudStack development mailing list. Report issue(s) on the user mailing list and/or open a Github issue.

  1. Fork the repository on Github
  2. Create a named feature branch (like add_component_x)
  3. Commit your change
  4. Write tests for your change if applicable
  5. Run the tests, ensuring they all pass
  6. Submit a Pull Request using Github

History

The original cloudmonkey was written in Python and contributed to Apache CloudStack project by Rohit Yadav on 31 Oct 2012 under the Apache License 2.0.

Starting version 6.0.0, the modern cloudmonkey cmk is a fast and simplified Go-port of the original tool with some backward incompatibilities and reduced feature set. It ships as a standalone 64-bit executable binary for several platforms such as Linux, Mac and Windows.

NOTE:

If cloudmonkey is being upgraded from a version lower than v6.0.0, it must be noted that the cloudmonkey configuration path is changed from ~/.cloudmonkey/config to ~/.cmk/config and a default localcloud profile is created. One must first set up basic configurations such as apikey/secretkey/username/password/url for the required profile(s) as required

License

Licensed to the Apache Software Foundation (ASF) under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License, Version 2.0 (the “License”); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an “AS IS” BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.