Commit Graph

202 Commits

Author SHA1 Message Date
Carlo Costino
ba0daeaf76 Updated pip-audit ignore-vulns
This changeset updates the PYSEC notices to ignore to due versions that either cannot be fixed or are false positives.  Specifically, this changeset removes previously ignored vulnerability reports and adds PYSEC-2023-312 to the list because it is a false positive and refers to Redis itself, not the Python Redis client (see https://github.com/pypa/advisory-database/issues/237 for details).

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-05-28 17:37:04 -04:00
Carlo Costino
50bdf916ba Merge branch 'main' into fix-existing-e2e-tests 2025-05-01 09:45:23 -04:00
Beverly Nguyen
6dd44fdc2d added feature flag 2025-04-10 12:35:04 -07:00
alexjanousekGSA
35f3203e9c Removed feature flag 2025-03-20 14:22:41 -04:00
Carlo Costino
606b124912 Fix existing end-to-end tests
This changeset re-enables our existing end-to-end tests and gets them working again after responding to a security incident.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-03-18 23:24:49 -04:00
Kenneth Kehl
9a8a80ab14 add comment 2025-03-18 10:19:02 -07:00
Kenneth Kehl
cb334c0dcd ugh 2025-03-17 16:28:46 -07:00
Jonathan Bobel
20012885b1 Update checks.yml 2025-03-04 11:26:21 -05:00
Carlo Costino
eadd8dddb5 Update GitHub Action References
This changeset updates many of our GitHub Action references to point to the latest versions to ensure they are kept up-to-date.  This helps address any improvements and security patches that have been made to them.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-02-19 16:56:09 -05:00
Kenneth Kehl
bd619af421 merge from main 2025-02-03 09:01:12 -08:00
Carlo Costino
0ba489df78 Update reference to zaproxy/action-baseline to 0.14.0
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-01-31 10:46:32 -05:00
Carlo Costino
4ae351b1f6 This changeset explicitly enables the FEATURE_ABOUT_PAGE_ENABLED feature flag for our dynamic scans to make sure that all pages are scanned, regardless if they are enabled on our production site or not.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-01-30 16:32:12 -05:00
Kenneth Kehl
9630d085f4 Update .github/workflows/checks.yml
Co-authored-by: Carlo Costino <ccostino@users.noreply.github.com>
2025-01-29 13:21:28 -08:00
Kenneth Kehl
5d565ab88b fix black and isort forever 2025-01-22 13:45:42 -08:00
Andrew Shumway
598a9af6f1 Add redis ID to ignore vulnerability list in audit/no current fix 2024-11-21 11:42:30 -07:00
Kenneth Kehl
f37b89849e cleanup 2024-10-07 13:44:43 -07:00
Kenneth Kehl
b4b15bc209 cleanup 2024-10-07 10:45:02 -07:00
Kenneth Kehl
44524eb9e2 try to not put vcap services into a secret 2024-10-07 10:26:43 -07:00
Kenneth Kehl
4b8b078476 try to not put vcap services into a secret 2024-10-07 10:03:45 -07:00
Kenneth Kehl
e41ad9fab9 update secrets 2024-10-07 07:47:30 -07:00
Kenneth Kehl
fb83e8610c update secrets 2024-10-07 07:33:40 -07:00
Kenneth Kehl
108e93d06a update secrets 2024-10-04 15:44:08 -07:00
Kenneth Kehl
4d4288d3c7 try again 2024-10-04 15:20:30 -07:00
Kenneth Kehl
c0ffa63f88 try again 2024-10-04 15:14:45 -07:00
Kenneth Kehl
89413c56ba try again 2024-10-04 15:04:34 -07:00
Kenneth Kehl
e6a3c0d4b7 try again 2024-10-04 14:52:58 -07:00
Kenneth Kehl
7d2f7d1c8a try again 2024-10-04 14:37:52 -07:00
Kenneth Kehl
f118b1c4bf try again 2024-10-04 14:28:12 -07:00
Kenneth Kehl
85a5e3075a try again 2024-10-04 14:18:48 -07:00
Kenneth Kehl
59959cfab4 try again 2024-10-04 14:09:39 -07:00
Kenneth Kehl
68cf422ca8 try again 2024-10-04 13:23:23 -07:00
Kenneth Kehl
a9999aa8ec try again 2024-10-04 13:18:15 -07:00
Kenneth Kehl
3a50fff6ea try again 2024-10-04 13:08:36 -07:00
Kenneth Kehl
c15d388fc2 try again 2024-10-04 13:00:31 -07:00
Kenneth Kehl
ec3ebe5b90 try again 2024-10-04 12:32:04 -07:00
Kenneth Kehl
60e3c5291e try again 2024-10-04 12:18:46 -07:00
Kenneth Kehl
4e3eb03040 try again 2024-10-04 12:10:16 -07:00
Kenneth Kehl
21bd20f607 try again 2024-10-04 11:32:16 -07:00
Kenneth Kehl
a27b9a701b try again 2024-10-04 11:08:15 -07:00
Kenneth Kehl
77f44d4d5e try again 2024-10-04 11:02:52 -07:00
Kenneth Kehl
cc3d70303c add vcap secret 2024-10-04 09:57:15 -07:00
Kenneth Kehl
ced229167f add vcap secret 2024-10-04 08:04:41 -07:00
Kenneth Kehl
114814b0b5 add vcap secret 2024-10-04 07:50:34 -07:00
Kenneth Kehl
88262302e6 add VCAP_SERVICES 2024-10-04 07:06:35 -07:00
Kenneth Kehl
37bb89402e add VCAP_SERVICES 2024-10-03 12:09:15 -07:00
Kenneth Kehl
f20803ecae add VCAP_SERVICES 2024-10-03 12:04:50 -07:00
Kenneth Kehl
addf4f0959 add VCAP_SERVICES 2024-10-03 12:00:31 -07:00
Kenneth Kehl
b7f26454ff add VCAP_SERVICES 2024-10-03 11:53:11 -07:00
Kenneth Kehl
a669477f48 add VCAP_SERVICES 2024-10-03 11:49:42 -07:00
Kenneth Kehl
d2c654214b add VCAP_SERVICES 2024-10-03 11:28:12 -07:00