Commit Graph

339 Commits

Author SHA1 Message Date
Kenneth Kehl
a5399ae693 manually roll python back to 3.12.2 2025-06-09 08:59:50 -07:00
Carlo Costino
595ae759d1 Unpin egress proxy release and eventlet dependency
This changeset unpins the egress proxy release now that we have resolved the other issues surrounding the connectivity to S3.  It also makes sure the eventlet dependency is up-to-date.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-06-04 12:12:29 -04:00
Kenneth Kehl
7dfe9c5988 merge from main 2025-05-30 13:30:51 -07:00
Kenneth Kehl
4cbcf3fe27 python upgrade 2025-05-30 10:09:40 -07:00
ccostino
3d44e76383 Update .github/workflows/checks.yml
Removing extraneous vulnerability ignore config.
2025-05-30 10:57:24 -04:00
Kenneth Kehl
038f4e294a merge from main 2025-05-29 14:46:02 -07:00
Kenneth Kehl
3fe74bea54 add exclusion 2025-05-29 11:25:01 -07:00
Carlo Costino
ba0daeaf76 Updated pip-audit ignore-vulns
This changeset updates the PYSEC notices to ignore to due versions that either cannot be fixed or are false positives.  Specifically, this changeset removes previously ignored vulnerability reports and adds PYSEC-2023-312 to the list because it is a false positive and refers to Redis itself, not the Python Redis client (see https://github.com/pypa/advisory-database/issues/237 for details).

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-05-28 17:37:04 -04:00
Kenneth Kehl
665d7b543b upgrade poetry to 2.1.3 2025-05-27 12:44:28 -07:00
Kenneth Kehl
7ba4f3658e upgrade poetry to 2.1.3 2025-05-27 12:32:54 -07:00
Kenneth Kehl
0afc93958c upgrade poetry to 2.1.3 2025-05-27 12:25:52 -07:00
Kenneth Kehl
29db4dcf4d upgrade poetry to 2.1.3 2025-05-27 11:34:11 -07:00
ccostino
db885d14ec Merge pull request #2594 from GSA/sheevdave-patch-2
Update manual_qa_template.yml
2025-05-23 10:48:03 -04:00
Carlo Costino
757803312d Tweaked a couple more of the steps to be in line with the current sign in/out flow
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-05-23 10:39:39 -04:00
Beverly Nguyen
790fe2d6f9 update csp using variables and testing 2025-05-22 12:03:18 -07:00
Sheev Davé
6cc152c07c Update manual_qa_template.yml
Deleted 2FA directions since that's directly managed by login.gov
2025-05-21 13:06:03 -07:00
ccostino
5dcf967941 Merge pull request #2582 from GSA/2581-adding-api_public_url-to-env
Add API_PUBLIC_URL environment variable for public API access
2025-05-20 16:27:51 -04:00
Beverly Nguyen
1b6894139d Fix formatting 2025-05-20 10:27:07 -07:00
Beverly Nguyen
2459ecd715 Fix formatting 2025-05-20 10:26:54 -07:00
alexjanousekGSA
802bda5169 Merge branch 'main' into update-dependabot 2025-05-20 13:11:17 -04:00
alexjanousekGSA
3b8b38d6ad Updated review and assignee name for dependabot 2025-05-20 09:51:11 -04:00
Beverly Nguyen
bc2738a97a Added API_PUBLIC_URL to GitHub Secrets and updated deploy workflows with new API_PUBLIC_URL 2025-05-19 17:22:28 -07:00
Carlo Costino
8b6edf93db Pin egress proxy release
This changeset pins the egress proxy to a previous release to help troubleshoot a potential issue with the underlying Caddy server update.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-05-12 12:51:00 -04:00
alexjanousekGSA
35176328ca Updating virtualenv to specific version 2025-05-05 13:09:03 -04:00
Carlo Costino
50bdf916ba Merge branch 'main' into fix-existing-e2e-tests 2025-05-01 09:45:23 -04:00
Beverly Nguyen
6dd44fdc2d added feature flag 2025-04-10 12:35:04 -07:00
alexjanousekGSA
35f3203e9c Removed feature flag 2025-03-20 14:22:41 -04:00
Carlo Costino
606b124912 Fix existing end-to-end tests
This changeset re-enables our existing end-to-end tests and gets them working again after responding to a security incident.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-03-18 23:24:49 -04:00
Kenneth Kehl
9a8a80ab14 add comment 2025-03-18 10:19:02 -07:00
Kenneth Kehl
cb334c0dcd ugh 2025-03-17 16:28:46 -07:00
Kenneth Kehl
47657d45ed initial 2025-03-17 09:57:15 -07:00
Jonathan Bobel
20012885b1 Update checks.yml 2025-03-04 11:26:21 -05:00
Carlo Costino
fe6921e243 Update Terraform installation and configuration
This changeset accounts for having to explicitly install Terraform and updates our user configuration in several environments to account for team member changes.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-02-19 21:41:32 -05:00
Carlo Costino
eadd8dddb5 Update GitHub Action References
This changeset updates many of our GitHub Action references to point to the latest versions to ensure they are kept up-to-date.  This helps address any improvements and security patches that have been made to them.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-02-19 16:56:09 -05:00
Kenneth Kehl
bd619af421 merge from main 2025-02-03 09:01:12 -08:00
Carlo Costino
d627ba62de Update reference in daily check action
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-01-31 11:08:48 -05:00
Carlo Costino
0ba489df78 Update reference to zaproxy/action-baseline to 0.14.0
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-01-31 10:46:32 -05:00
Carlo Costino
4ae351b1f6 This changeset explicitly enables the FEATURE_ABOUT_PAGE_ENABLED feature flag for our dynamic scans to make sure that all pages are scanned, regardless if they are enabled on our production site or not.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-01-30 16:32:12 -05:00
Carlo Costino
653f3f5644 Merge pull request #2293 from GSA/sheevdave-patch-3
Update issue_template.yml
2025-01-30 12:45:31 -05:00
Sheev Davé
057ed6f88c Update .github/ISSUE_TEMPLATE/issue_template.yml
Co-authored-by: Carlo Costino <ccostino@users.noreply.github.com>
2025-01-30 09:34:56 -08:00
Kenneth Kehl
9630d085f4 Update .github/workflows/checks.yml
Co-authored-by: Carlo Costino <ccostino@users.noreply.github.com>
2025-01-29 13:21:28 -08:00
Sheev Davé
22fcc703f5 Update issue_template.yml 2025-01-27 12:53:47 -08:00
Sheev Davé
4e335561e3 Update issue_template.yml
added "This includes items related to accessibility." to 3 sections
2025-01-23 11:57:37 -08:00
Kenneth Kehl
5d565ab88b fix black and isort forever 2025-01-22 13:45:42 -08:00
Sheev Davé
c47033af7f Update pull_request_template.md
added more a11y specific checks
2025-01-22 13:23:05 -08:00
Sheev Davé
ac79edf613 Update pull_request_template.md
Added a11y checks to PR template
2025-01-21 12:03:35 -08:00
Kenneth Kehl
e9ba1c7726 pin poetry to 1.8.5 for now 2025-01-07 10:03:06 -08:00
Andrew Shumway
598a9af6f1 Add redis ID to ignore vulnerability list in audit/no current fix 2024-11-21 11:42:30 -07:00
Carlo Costino
312612a04d Fix Login.gov sign in URL formatting for staging
This changeset fixes a typo by removing an extra E from the Login.gov sign in URL, which was causing the STATE variable to not be properly replaced with the actual state, because STATE != STATEE.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-11-07 22:22:24 -05:00
Carlo Costino
a3c021b154 Fix demo and prod deploy actions
This changeset makes a couple of more adjustments to the prod and demo deploy actions to make sure they are in sync with staging and work.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-10-16 14:26:02 -04:00