Commit Graph

13028 Commits

Author SHA1 Message Date
Ryan Ahearn
2a6bc62003 Use csp nonces for inline scripts and styles 2023-03-08 08:29:19 -05:00
Ryan Ahearn
e8e8c889d6 Add flask-talisman for security headers 2023-03-07 16:08:39 -05:00
Tim Lowden
218f0d0c85 Merge pull request #410 from GSA/em-herrick-patch-1
Update notify-pilot-info.md
2023-03-07 11:01:37 -05:00
Emily Herrick
2db1d26e32 Update notify-pilot-info.md 2023-03-07 10:55:47 -05:00
Steven Reilly
b3c358a8de Merge pull request #402 from GSA/tdlowden-fixes-branch
Pricing page content updates
2023-03-01 11:21:43 -05:00
Tim Lowden
f4c122b9f6 Update index.html 2023-03-01 11:10:16 -05:00
Tim Lowden
1a6610c85a Update index.html 2023-02-28 08:39:23 -05:00
Ryan Ahearn
276e96be42 Merge pull request #394 from GSA/dependabot/pip/markdown-it-py-2.2.0
Bump markdown-it-py from 2.1.0 to 2.2.0
2023-02-24 16:27:32 -05:00
dependabot[bot]
8aaa3665ed Bump markdown-it-py from 2.1.0 to 2.2.0
Bumps [markdown-it-py](https://github.com/executablebooks/markdown-it-py) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/executablebooks/markdown-it-py/releases)
- [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md)
- [Commits](https://github.com/executablebooks/markdown-it-py/compare/v2.1.0...v2.2.0)

---
updated-dependencies:
- dependency-name: markdown-it-py
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-02-23 20:08:58 +00:00
Ryan Ahearn
47828c35e2 Merge pull request #326 from GSA/tdlowden-guidance
Changes to guidance pages
2023-02-21 11:15:54 -05:00
Ryan Ahearn
2582dcccfb Merge branch 'main' into tdlowden-guidance
* main: (21 commits)
  Expect sms 2nd factor codes to be 6 digits
  Bump werkzeug from 2.2.2 to 2.2.3
  Switch egress proxy to official repo
  Run pipenv update
  Pin openpyxls to avoid bug between 3.1 and pyexcel-xlsx
  Bump cryptography from 39.0.0 to 39.0.1
  Remove direct use of aws creds from deployed environments
  Add cf-cli version check to create_service_account
  Tweak tail & jq usage to parse cf-cli@8 output
  Load New Relic in manifest.yml startup command
  Document how to retrieve NEW_RELIC_LICENSE_KEY for dev
  Use main notifications-utils branch again
  Remove wildcard matcher on egress allow
  Update proxy settings to enable sending data to new relic
  Updates for sandbox env
  Fix header test
  Configure egress proxy for new relic integration
  Add newrelic to browser CSP directives
  Validate new relic config in github actions
  Report data to newrelic
  ...
2023-02-21 11:10:34 -05:00
Tim Lowden
cb8aeccb6d Update index.html
per @rahearn catch
2023-02-21 11:02:06 -05:00
Ryan Ahearn
dfd0858980 Merge pull request #387 from GSA/increase-sms-code-length
Expect sms 2nd factor codes to be 6 digits
2023-02-17 13:18:55 -05:00
Ryan Ahearn
d9f1ee5af6 Expect sms 2nd factor codes to be 6 digits 2023-02-17 11:53:44 -05:00
Ryan Ahearn
ee2c3ebc27 Merge pull request #379 from GSA/dependabot/pip/werkzeug-2.2.3
Bump werkzeug from 2.2.2 to 2.2.3
2023-02-16 08:01:37 -05:00
dependabot[bot]
c5405d44e1 Bump werkzeug from 2.2.2 to 2.2.3
Bumps [werkzeug](https://github.com/pallets/werkzeug) from 2.2.2 to 2.2.3.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/werkzeug/compare/2.2.2...2.2.3)

---
updated-dependencies:
- dependency-name: werkzeug
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-02-16 07:35:35 +00:00
Ryan Ahearn
baf926f14d Merge pull request #378 from GSA/utils-and-proxy-update
Utils lib and proxy deploy update
2023-02-14 16:50:13 -05:00
Ryan Ahearn
1ccdfebc08 Switch egress proxy to official repo 2023-02-14 12:20:10 -05:00
Ryan Ahearn
3ae078a976 Run pipenv update 2023-02-14 12:20:01 -05:00
Ryan Ahearn
396c2148a3 Merge pull request #367 from GSA/dependabot/pip/cryptography-39.0.1
Bump cryptography from 39.0.0 to 39.0.1
2023-02-08 10:58:32 -05:00
Ryan Ahearn
a08ddd83bb Pin openpyxls to avoid bug between 3.1 and pyexcel-xlsx 2023-02-08 10:37:44 -05:00
dependabot[bot]
25e748ba9a Bump cryptography from 39.0.0 to 39.0.1
Bumps [cryptography](https://github.com/pyca/cryptography) from 39.0.0 to 39.0.1.
- [Release notes](https://github.com/pyca/cryptography/releases)
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/39.0.0...39.0.1)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-02-08 05:29:22 +00:00
Ryan Ahearn
05881827f9 Merge pull request #361 from GSA/remove-default-s3-creds
Remove direct use of aws creds from deployed environments
2023-02-03 12:39:12 -05:00
Ryan Ahearn
aa3043e8df Remove direct use of aws creds from deployed environments 2023-02-01 11:57:59 -05:00
Ryan Ahearn
6682f306d7 Merge pull request #357 from GSA/cf-cli-8
Tweak tail & jq usage to parse cf-cli@8 output
2023-01-27 15:34:33 -05:00
Ryan Ahearn
873c9caf21 Add cf-cli version check to create_service_account 2023-01-27 14:54:29 -05:00
Ryan Ahearn
ff6ef9f26a Tweak tail & jq usage to parse cf-cli@8 output 2023-01-27 14:28:17 -05:00
Ryan Ahearn
f3426aaafa Merge pull request #354 from GSA/new-relic
Load New Relic in manifest.yml startup command
2023-01-27 08:27:18 -05:00
Ryan Ahearn
12b2993700 Load New Relic in manifest.yml startup command 2023-01-26 16:13:52 -05:00
Ryan Ahearn
c3b45abc29 Merge pull request #345 from GSA/new-relic
Configure New Relic for admin app
2023-01-26 14:03:53 -05:00
Ryan Ahearn
403ac7bf7d Document how to retrieve NEW_RELIC_LICENSE_KEY for dev 2023-01-26 13:57:17 -05:00
Ryan Ahearn
26092b577e Use main notifications-utils branch again 2023-01-26 10:36:15 -05:00
Ryan Ahearn
897f8594d8 Remove wildcard matcher on egress allow 2023-01-24 15:57:57 -05:00
Ryan Ahearn
28f0c05f0f Update proxy settings to enable sending data to new relic 2023-01-24 13:54:16 -05:00
Ryan Ahearn
227711b226 Updates for sandbox env 2023-01-24 13:52:10 -05:00
Ryan Ahearn
9615f9d0c2 Fix header test 2023-01-23 11:05:51 -05:00
Ryan Ahearn
fb0c3e99d9 Configure egress proxy for new relic integration 2023-01-23 10:41:26 -05:00
Ryan Ahearn
f5e3ad56c7 Add newrelic to browser CSP directives 2023-01-23 10:10:22 -05:00
Ryan Ahearn
c622b61bcd Validate new relic config in github actions 2023-01-23 10:02:26 -05:00
Ryan Ahearn
23f6f3c726 Report data to newrelic 2023-01-23 10:00:03 -05:00
Ryan Ahearn
7d08e9e0d4 Upgrade flask and install newrelic package 2023-01-19 17:29:21 -05:00
Tim Lowden
f3d16187df Changes to guidance pages 2023-01-09 12:41:13 -05:00
Ryan Ahearn
fc4f2856c3 Merge pull request #322 from GSA/dependabot/npm_and_yarn/json5-2.2.3
Bump json5 from 2.2.1 to 2.2.3
2023-01-06 16:06:19 -05:00
dependabot[bot]
4aeb42ceac Bump json5 from 2.2.1 to 2.2.3
Bumps [json5](https://github.com/json5/json5) from 2.2.1 to 2.2.3.
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](https://github.com/json5/json5/compare/v2.2.1...v2.2.3)

---
updated-dependencies:
- dependency-name: json5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-01-06 20:49:11 +00:00
Ryan Ahearn
e3ddd2a980 Merge pull request #321 from GSA/us-phone-numbers
Default to US phone numbers
2023-01-06 15:48:42 -05:00
Ryan Ahearn
142b5f5e43 Update excel-based upload files 2023-01-06 11:47:57 -05:00
Ryan Ahearn
2ad21a6f4f Replace UK phone numbers in tests with US numbers 2023-01-06 11:19:56 -05:00
Steven Reilly
cc142666d5 Merge pull request #269 from GSA/tdlowden-2
Updating for US English
2023-01-06 09:30:33 -05:00
stvnrlly
f3813769f9 Merge branch 'main' into tdlowden-2 2023-01-05 21:55:07 -05:00
stvnrlly
59d4f09d01 a few more organisation edits 2023-01-05 21:33:15 -05:00