Carlo Costino
ba0daeaf76
Updated pip-audit ignore-vulns
...
This changeset updates the PYSEC notices to ignore to due versions that either cannot be fixed or are false positives. Specifically, this changeset removes previously ignored vulnerability reports and adds PYSEC-2023-312 to the list because it is a false positive and refers to Redis itself, not the Python Redis client (see https://github.com/pypa/advisory-database/issues/237 for details).
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-05-28 17:37:04 -04:00
Carlo Costino
50bdf916ba
Merge branch 'main' into fix-existing-e2e-tests
2025-05-01 09:45:23 -04:00
Beverly Nguyen
6dd44fdc2d
added feature flag
2025-04-10 12:35:04 -07:00
alexjanousekGSA
35f3203e9c
Removed feature flag
2025-03-20 14:22:41 -04:00
Carlo Costino
606b124912
Fix existing end-to-end tests
...
This changeset re-enables our existing end-to-end tests and gets them working again after responding to a security incident.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-03-18 23:24:49 -04:00
Kenneth Kehl
9a8a80ab14
add comment
2025-03-18 10:19:02 -07:00
Kenneth Kehl
cb334c0dcd
ugh
2025-03-17 16:28:46 -07:00
Jonathan Bobel
20012885b1
Update checks.yml
2025-03-04 11:26:21 -05:00
Carlo Costino
eadd8dddb5
Update GitHub Action References
...
This changeset updates many of our GitHub Action references to point to the latest versions to ensure they are kept up-to-date. This helps address any improvements and security patches that have been made to them.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-02-19 16:56:09 -05:00
Kenneth Kehl
bd619af421
merge from main
2025-02-03 09:01:12 -08:00
Carlo Costino
0ba489df78
Update reference to zaproxy/action-baseline to 0.14.0
...
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-01-31 10:46:32 -05:00
Carlo Costino
4ae351b1f6
This changeset explicitly enables the FEATURE_ABOUT_PAGE_ENABLED feature flag for our dynamic scans to make sure that all pages are scanned, regardless if they are enabled on our production site or not.
...
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov >
2025-01-30 16:32:12 -05:00
Kenneth Kehl
9630d085f4
Update .github/workflows/checks.yml
...
Co-authored-by: Carlo Costino <ccostino@users.noreply.github.com >
2025-01-29 13:21:28 -08:00
Kenneth Kehl
5d565ab88b
fix black and isort forever
2025-01-22 13:45:42 -08:00
Andrew Shumway
598a9af6f1
Add redis ID to ignore vulnerability list in audit/no current fix
2024-11-21 11:42:30 -07:00
Kenneth Kehl
f37b89849e
cleanup
2024-10-07 13:44:43 -07:00
Kenneth Kehl
b4b15bc209
cleanup
2024-10-07 10:45:02 -07:00
Kenneth Kehl
44524eb9e2
try to not put vcap services into a secret
2024-10-07 10:26:43 -07:00
Kenneth Kehl
4b8b078476
try to not put vcap services into a secret
2024-10-07 10:03:45 -07:00
Kenneth Kehl
e41ad9fab9
update secrets
2024-10-07 07:47:30 -07:00
Kenneth Kehl
fb83e8610c
update secrets
2024-10-07 07:33:40 -07:00
Kenneth Kehl
108e93d06a
update secrets
2024-10-04 15:44:08 -07:00
Kenneth Kehl
4d4288d3c7
try again
2024-10-04 15:20:30 -07:00
Kenneth Kehl
c0ffa63f88
try again
2024-10-04 15:14:45 -07:00
Kenneth Kehl
89413c56ba
try again
2024-10-04 15:04:34 -07:00
Kenneth Kehl
e6a3c0d4b7
try again
2024-10-04 14:52:58 -07:00
Kenneth Kehl
7d2f7d1c8a
try again
2024-10-04 14:37:52 -07:00
Kenneth Kehl
f118b1c4bf
try again
2024-10-04 14:28:12 -07:00
Kenneth Kehl
85a5e3075a
try again
2024-10-04 14:18:48 -07:00
Kenneth Kehl
59959cfab4
try again
2024-10-04 14:09:39 -07:00
Kenneth Kehl
68cf422ca8
try again
2024-10-04 13:23:23 -07:00
Kenneth Kehl
a9999aa8ec
try again
2024-10-04 13:18:15 -07:00
Kenneth Kehl
3a50fff6ea
try again
2024-10-04 13:08:36 -07:00
Kenneth Kehl
c15d388fc2
try again
2024-10-04 13:00:31 -07:00
Kenneth Kehl
ec3ebe5b90
try again
2024-10-04 12:32:04 -07:00
Kenneth Kehl
60e3c5291e
try again
2024-10-04 12:18:46 -07:00
Kenneth Kehl
4e3eb03040
try again
2024-10-04 12:10:16 -07:00
Kenneth Kehl
21bd20f607
try again
2024-10-04 11:32:16 -07:00
Kenneth Kehl
a27b9a701b
try again
2024-10-04 11:08:15 -07:00
Kenneth Kehl
77f44d4d5e
try again
2024-10-04 11:02:52 -07:00
Kenneth Kehl
cc3d70303c
add vcap secret
2024-10-04 09:57:15 -07:00
Kenneth Kehl
ced229167f
add vcap secret
2024-10-04 08:04:41 -07:00
Kenneth Kehl
114814b0b5
add vcap secret
2024-10-04 07:50:34 -07:00
Kenneth Kehl
88262302e6
add VCAP_SERVICES
2024-10-04 07:06:35 -07:00
Kenneth Kehl
37bb89402e
add VCAP_SERVICES
2024-10-03 12:09:15 -07:00
Kenneth Kehl
f20803ecae
add VCAP_SERVICES
2024-10-03 12:04:50 -07:00
Kenneth Kehl
addf4f0959
add VCAP_SERVICES
2024-10-03 12:00:31 -07:00
Kenneth Kehl
b7f26454ff
add VCAP_SERVICES
2024-10-03 11:53:11 -07:00
Kenneth Kehl
a669477f48
add VCAP_SERVICES
2024-10-03 11:49:42 -07:00
Kenneth Kehl
d2c654214b
add VCAP_SERVICES
2024-10-03 11:28:12 -07:00