Merge branch 'master' into joepeeples/10684-pr-gates

Author: joepeeples

.apigentools-info

@@ -4,13 +4,13 @@
     "spec_versions": {
         "v1": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2025-07-08 19:10:31.200709",
-            "spec_repo_commit": "7b042e12"
+            "regenerated": "2025-07-24 19:59:19.182981",
+            "spec_repo_commit": "c09ac236"
         },
         "v2": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2025-07-08 19:10:40.400486",
-            "spec_repo_commit": "7b042e12"
+            "regenerated": "2025-07-24 19:59:28.761694",
+            "spec_repo_commit": "c09ac236"
         }
     }
 }

.claude/settings.local.json

@@ -0,0 +1,3 @@
+{
+  "permissions": {}
+}

.github/CODEOWNERS

@@ -37,6 +37,7 @@ translate.yaml                                          @DataDog/WebOps-Platform
 yarn.lock                                               @DataDog/WebOps-Platform
 .yarnrc.yml                                             @DataDog/WebOps-Platform
 repository.datadog.yml                                  @Datadog/WebOps-Platform
+service.datadog.yaml                                    @DataDog/WebOps-Platform @DataDog/documentation
 
 # Scoped Docs/WebOps
 .github/                                                      @DataDog/WebOps-Platform

.gitignore

@@ -81,6 +81,11 @@ content/en/security/cloud_workload_security/backend.md
 content/en/security/threats/agent_expressions.md
 content/en/security/threats/backend.md
 content/en/security_platform/
+content/en/security/workload_protection/agent_expressions.md
+content/en/security/workload_protection/backend_linux.md
+content/en/security/workload_protection/backend_windows.md
+content/en/security/workload_protection/linux_expressions.md
+content/en/security/workload_protection/windows_expressions.md
 
 # security threat detection
 content/en/security/threats/backend_linux.md
@@ -128,6 +133,10 @@ content/en/code_analysis/static_analysis_rules/_index.md
 content/en/security/code_security/static_analysis/static_analysis_rules/*
 !content/en/security/code_security/static_analysis/static_analysis_rules/_index.md
 
+# IaC Kics Rules
+content/en/security/code_security/iac_security/iac_rules/*
+!content/en/security/code_security/iac_security/iac_rules/_index.md
+
 # Let's keep these so we don't accidentally re-add them to repo
 content/en/continuous_integration/static_analysis/github_actions.md
 content/en/continuous_integration/static_analysis/circleci_orbs.md

.htmltest.yml

@@ -1,9 +1,9 @@
 DirectoryPath: "public"
 
 # Speeds things up but may cause errors in some cases, the two other settings limit the amount of docs and links processed at one time
-TestFilesConcurrently: false
-DocumentConcurrencyLimit: 32 #defaults to 128
-HTTPConcurrencyLimit: 8 #defaults to 16
+TestFilesConcurrently: true
+DocumentConcurrencyLimit: 10 #defaults to 128
+HTTPConcurrencyLimit: 4 #defaults to 16
 
 # General config
 CheckDoctype: false
@@ -30,6 +30,9 @@ IgnoreDirs:
   - es
   - security/default_rules
 IgnoreURLs:
+  - "/favicon.ico"
+  - "/resources/*"
+  - "/config/*"
   - "/?api/(v1|v2)/*"
   - play.google.com
   - "[linkedin|twitter|instagram].com"

.husky/pre-commit

@@ -0,0 +1,11 @@
+branch=$(git branch --show-current)
+
+YELLOW="\033[1;33m"
+ENDCOLOR="\033[0m"
+WHITE="\033[1m"
+
+# If the current branch is master, abort the commit
+if [ "$branch" = "master" ]; then
+  echo "${YELLOW}You're trying to commit to master. Use a feature branch instead.${ENDCOLOR}"
+  exit 1
+fi

.husky/pre-push

@@ -0,0 +1,11 @@
+branch=$(git branch --show-current)
+
+YELLOW="\033[1;33m"
+ENDCOLOR="\033[0m"
+WHITE="\033[1m"
+
+# If the current branch is master, abort the push
+if [ "$branch" = "master" ]; then
+  echo "${YELLOW}You're trying to push to master. Use a feature branch instead.${ENDCOLOR}"
+  exit 1
+fi

.vale.ini

@@ -30,4 +30,5 @@ Datadog.sentencelength = NO
 Datadog.spaces = NO
 Datadog.tense = NO
 Datadog.words = YES
-Datadog.quotes = NO
+Datadog.quotes = NO
+Datadog.aws = YES

CLAUDE.md

@@ -0,0 +1,112 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Repository Overview
+
+This is the Datadog Documentation repository, built using Hugo (static site generator) and published to docs.datadoghq.com. The codebase consists of markdown content, Hugo themes, Node.js build scripts, and Python automation tools.
+
+## Development Commands
+
+### Build and Development
+- `yarn start` or `make start` - Full build including external dependencies and run development server
+- `yarn run start` - Basic Hugo development server (port 1313)
+- `make start-no-pre-build` - Skip external dependencies, build and run
+- `make start-preserve-build` - Keep existing build scripts for local testing
+- `make start-docker` - Build and run via Docker container
+
+### Build Commands
+- `yarn build` or `make build` - Production build
+- `yarn run build:hugo` - Run Hugo build only
+- `yarn run build:preview` - Build with preview environment
+- `make build-cdocs` - Compile .mdoc files to HTML
+
+### Testing and Quality
+- `yarn run jest-test` - Run JavaScript tests
+- `make clean` - Clean generated files
+- `make clean-all` - Clean everything (environment, repos, generated files)
+
+### Dependencies
+- `yarn install` - Install Node.js dependencies
+- `make dependencies` - Install all dependencies (Node + Python + external repos)
+- `make hugpython` - Set up Python virtual environment
+
+## Architecture
+
+### Content Structure
+- `content/en/` - English documentation (primary language)
+- `content/{fr,es,ja,ko}/` - Translated content (managed externally)
+- `layouts/` - Hugo templates and shortcodes
+- `static/` - Static assets, images, fonts
+- `assets/` - SCSS stylesheets and JavaScript
+
+### Build System
+- **Hugo**: Static site generator with custom themes
+- **Node.js**: Package management, build automation, asset processing
+- **Python**: Content processing, integration data fetching, translations
+- **Makefile**: Orchestrates complex build processes and external dependencies
+
+### External Dependencies
+The build system automatically fetches:
+- API client examples from multiple language repositories
+- Integration metadata and documentation
+- Vector integration data via CUE files
+- Some documentation is sourced from GitHub using the `pull_config.yaml` file at `local/bin/py/build/configurations/pull_config.yaml`.
+- Some documentation is sourced from a go module called `websites-sources`
+
+### Configuration
+- `config/` - Hugo configuration for different environments (development, preview, live)
+- `package.json` - Node.js dependencies and scripts
+- `Makefile` + `Makefile.config` - Build orchestration
+- Environment-specific parameters in `config/{env}/params.yaml`
+
+## Branch and PR Guidelines
+
+### Branch Naming
+CRITICAL: Always use format `<name>/<description>` with forward slash. Without this:
+- GitLab pipeline won't run
+- No branch preview will be generated
+- CI will fail
+
+### Content Guidelines
+Follow the CONTRIBUTING.md style guide:
+- Use American English (en_US)
+- Be plain, direct, and concise
+- Provide explicit instructions with examples
+- Use imperative voice for instructions
+- Don't edit translated content directly (managed externally)
+
+## Hugo-Specific Details
+
+### Shortcodes
+Extensive library in `layouts/shortcodes/` for:
+- Code examples across multiple languages
+- Integration-specific content
+- API documentation
+- Security and compliance sections
+
+### Content Types
+- Regular markdown pages
+- API reference (auto-generated)
+- Integration pages (auto-populated from external repos)
+- Multi-language code examples
+
+## Development Notes
+
+### Local Development
+- Requires Node.js >= 20.11.0
+- Python 3 for build scripts
+- Uses Yarn package manager (v3.6.1)
+- Development server runs on port 1313
+
+### External Content
+- API examples automatically sync from datadog-api-client-* repositories
+- Integration data pulled from the `websites-sources` go module.
+   - The exception is Dogweb integrations, which are pulled from a GitHub repository.
+- Some documentation is sourced from GitHub using the `pull_config.yaml` file at `local/bin/py/build/configurations/pull_config.yaml`.
+- Build scripts fetched from external repository during setup
+
+### Build Environments
+- **Development**: Local development with drafts
+- **Preview**: Branch previews for PRs
+- **Live**: Production deployment

Makefile

@@ -116,7 +116,7 @@ node_modules: package.json yarn.lock
 
 # All the requirements for a full build
 dependencies: clean
-	make hugpython all-examples update_pre_build node_modules build-cdocs placeholders
+	make hugpython all-examples update_pre_build node_modules build-cdocs
 
 integrations_data/extracted/vector:
 	$(call source_repo,vector,https://github.com/vectordotdev/vector.git,master,true,website/)
@@ -134,7 +134,7 @@ placeholders: hugpython update_pre_build
 hugpython: local/etc/requirements3.txt
 	@${PY3} -m venv --clear $@ && . $@/bin/activate && $@/bin/pip install --upgrade pip wheel && $@/bin/pip install -r $<;\
 	if [[ "$(CI_COMMIT_REF_NAME)" != "" ]]; then \
-		$@/bin/pip install https://binaries.ddbuild.io/dd-source/python/assetlib-0.0.59352473-py3-none-any.whl; \
+		$@/bin/pip install https://binaries.ddbuild.io/dd-source/python/assetlib-0.0.70443877-py3-none-any.whl; \
 	fi
 
 update_pre_build: hugpython
@@ -153,6 +153,13 @@ update_websites_sources_module:
 	node_modules/hugo-bin/vendor/hugo mod clean
 	node_modules/hugo-bin/vendor/hugo mod tidy
 	cat go.mod
+	@if [ -n "$(CI_COMMIT_REF_NAME)" ]; then \
+		echo "In ci, vendoring integrations pages for placeholder generation"; \
+		node_modules/hugo-bin/vendor/hugo mod vendor; \
+		cp -rpv _vendor/github.com/DataDog/websites-sources/content/en/integrations/. content/en/integrations/; \
+		rm -rf _vendor; \
+	fi
+
 #######################################################################################################################
 # API Code Examples
 #######################################################################################################################