Commit Graph

327 Commits

Author SHA1 Message Date
ccostino
db885d14ec Merge pull request #2594 from GSA/sheevdave-patch-2
Update manual_qa_template.yml
2025-05-23 10:48:03 -04:00
Carlo Costino
757803312d Tweaked a couple more of the steps to be in line with the current sign in/out flow
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-05-23 10:39:39 -04:00
Beverly Nguyen
790fe2d6f9 update csp using variables and testing 2025-05-22 12:03:18 -07:00
Sheev Davé
6cc152c07c Update manual_qa_template.yml
Deleted 2FA directions since that's directly managed by login.gov
2025-05-21 13:06:03 -07:00
ccostino
5dcf967941 Merge pull request #2582 from GSA/2581-adding-api_public_url-to-env
Add API_PUBLIC_URL environment variable for public API access
2025-05-20 16:27:51 -04:00
Beverly Nguyen
1b6894139d Fix formatting 2025-05-20 10:27:07 -07:00
Beverly Nguyen
2459ecd715 Fix formatting 2025-05-20 10:26:54 -07:00
alexjanousekGSA
802bda5169 Merge branch 'main' into update-dependabot 2025-05-20 13:11:17 -04:00
alexjanousekGSA
3b8b38d6ad Updated review and assignee name for dependabot 2025-05-20 09:51:11 -04:00
Beverly Nguyen
bc2738a97a Added API_PUBLIC_URL to GitHub Secrets and updated deploy workflows with new API_PUBLIC_URL 2025-05-19 17:22:28 -07:00
Carlo Costino
8b6edf93db Pin egress proxy release
This changeset pins the egress proxy to a previous release to help troubleshoot a potential issue with the underlying Caddy server update.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-05-12 12:51:00 -04:00
alexjanousekGSA
35176328ca Updating virtualenv to specific version 2025-05-05 13:09:03 -04:00
Carlo Costino
50bdf916ba Merge branch 'main' into fix-existing-e2e-tests 2025-05-01 09:45:23 -04:00
Beverly Nguyen
6dd44fdc2d added feature flag 2025-04-10 12:35:04 -07:00
alexjanousekGSA
35f3203e9c Removed feature flag 2025-03-20 14:22:41 -04:00
Carlo Costino
606b124912 Fix existing end-to-end tests
This changeset re-enables our existing end-to-end tests and gets them working again after responding to a security incident.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-03-18 23:24:49 -04:00
Kenneth Kehl
9a8a80ab14 add comment 2025-03-18 10:19:02 -07:00
Kenneth Kehl
cb334c0dcd ugh 2025-03-17 16:28:46 -07:00
Kenneth Kehl
47657d45ed initial 2025-03-17 09:57:15 -07:00
Jonathan Bobel
20012885b1 Update checks.yml 2025-03-04 11:26:21 -05:00
Carlo Costino
fe6921e243 Update Terraform installation and configuration
This changeset accounts for having to explicitly install Terraform and updates our user configuration in several environments to account for team member changes.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-02-19 21:41:32 -05:00
Carlo Costino
eadd8dddb5 Update GitHub Action References
This changeset updates many of our GitHub Action references to point to the latest versions to ensure they are kept up-to-date.  This helps address any improvements and security patches that have been made to them.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-02-19 16:56:09 -05:00
Kenneth Kehl
bd619af421 merge from main 2025-02-03 09:01:12 -08:00
Carlo Costino
d627ba62de Update reference in daily check action
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-01-31 11:08:48 -05:00
Carlo Costino
0ba489df78 Update reference to zaproxy/action-baseline to 0.14.0
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-01-31 10:46:32 -05:00
Carlo Costino
4ae351b1f6 This changeset explicitly enables the FEATURE_ABOUT_PAGE_ENABLED feature flag for our dynamic scans to make sure that all pages are scanned, regardless if they are enabled on our production site or not.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-01-30 16:32:12 -05:00
Carlo Costino
653f3f5644 Merge pull request #2293 from GSA/sheevdave-patch-3
Update issue_template.yml
2025-01-30 12:45:31 -05:00
Sheev Davé
057ed6f88c Update .github/ISSUE_TEMPLATE/issue_template.yml
Co-authored-by: Carlo Costino <ccostino@users.noreply.github.com>
2025-01-30 09:34:56 -08:00
Kenneth Kehl
9630d085f4 Update .github/workflows/checks.yml
Co-authored-by: Carlo Costino <ccostino@users.noreply.github.com>
2025-01-29 13:21:28 -08:00
Sheev Davé
22fcc703f5 Update issue_template.yml 2025-01-27 12:53:47 -08:00
Sheev Davé
4e335561e3 Update issue_template.yml
added "This includes items related to accessibility." to 3 sections
2025-01-23 11:57:37 -08:00
Kenneth Kehl
5d565ab88b fix black and isort forever 2025-01-22 13:45:42 -08:00
Sheev Davé
c47033af7f Update pull_request_template.md
added more a11y specific checks
2025-01-22 13:23:05 -08:00
Sheev Davé
ac79edf613 Update pull_request_template.md
Added a11y checks to PR template
2025-01-21 12:03:35 -08:00
Kenneth Kehl
e9ba1c7726 pin poetry to 1.8.5 for now 2025-01-07 10:03:06 -08:00
Andrew Shumway
598a9af6f1 Add redis ID to ignore vulnerability list in audit/no current fix 2024-11-21 11:42:30 -07:00
Carlo Costino
312612a04d Fix Login.gov sign in URL formatting for staging
This changeset fixes a typo by removing an extra E from the Login.gov sign in URL, which was causing the STATE variable to not be properly replaced with the actual state, because STATE != STATEE.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-11-07 22:22:24 -05:00
Carlo Costino
a3c021b154 Fix demo and prod deploy actions
This changeset makes a couple of more adjustments to the prod and demo deploy actions to make sure they are in sync with staging and work.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-10-16 14:26:02 -04:00
Carlo Costino
e54d18170e Add missing env var
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-10-16 13:03:35 -04:00
Carlo Costino
fc6adc6771 Fix the prod and demo deployment actions
This changeset fixes the prod and deployment actions so they have the correct environment variables.  It also fixes the egress proxy deploy config for each.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-10-16 12:44:55 -04:00
Kenneth Kehl
34ccfb5bd7 Merge pull request #1996 from GSA/e2e_tests_uncomment
Make e2e tests work fully with staging API
2024-10-15 09:57:19 -07:00
Carlo Costino
f27703112a Use the correct environment variable names
This changeset corrects the reference to the environment names that we are actually trying to reference.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-10-10 13:06:47 -04:00
Carlo Costino
fd447e9a75 Swap out config variables for env variables
This changeset swaps the CF_USERNAME and CF_PASSWORD config vars to be proper env vars so they can be read in as expected.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-10-09 14:20:10 -06:00
Carlo Costino
2fbce24f97 Add missing inputs to egress proxy deploy action
This changeset adds a few missing inputs to the egress proxy deploy action so that it can use the provided environment variables properly.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-10-09 13:48:47 -06:00
Carlo Costino
10da94dbf8 Merge pull request #1997 from GSA/update-egress-proxy-even-more
Add missing environment veriables to egress deploy action
2024-10-09 13:24:56 -06:00
Kenneth Kehl
f37b89849e cleanup 2024-10-07 13:44:43 -07:00
Kenneth Kehl
b4b15bc209 cleanup 2024-10-07 10:45:02 -07:00
Kenneth Kehl
44524eb9e2 try to not put vcap services into a secret 2024-10-07 10:26:43 -07:00
Kenneth Kehl
4b8b078476 try to not put vcap services into a secret 2024-10-07 10:03:45 -07:00
Kenneth Kehl
e41ad9fab9 update secrets 2024-10-07 07:47:30 -07:00