Commit Graph

351 Commits

Author SHA1 Message Date
Carlo Costino
735b657db1 Minor template folder permissions adjustments
This changeset adds a bit more clarity to the template folder permissions checklist.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-08-20 12:45:53 -04:00
Carlo Costino
78d1b42ede Updated QA prod release checklist
This changeset updates our QA prod release issue template to account for some recent changes to our reports and template folder handling, among other minor improvements.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-08-20 10:58:52 -04:00
Alex Janousek
5c00ee1840 Fix/main build 2 (#2819)
* Removed double slash

* Fixing race condition with testing

* Created cleaner solution

* Keeping flash alive longer so tests finish in main build
2025-08-07 12:52:56 -07:00
Alex Janousek
843699061d Removed double slash (#2817) 2025-08-07 11:55:26 -04:00
Carlo Costino
f3df2f9c33 Downgrade Python to 3.12.9 again
This changeset puts us back to Python 3.12.9 since we are still wrestling with certificate validation errors in Python 3.13 and no easy way to test things without breaking our deployment flow currently.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-07-30 12:24:16 -04:00
Kenneth Kehl
814d08af2b upgrade to python 3.13.2 2025-07-28 11:56:55 -07:00
alexjanousekGSA
30d0e0f57e Updated dependabot yml to remove depecrated review assignment 2025-07-21 12:06:01 -04:00
Kenneth Kehl
ff3b9eb820 upgrade to python 3.12.9 2025-06-27 07:00:45 -07:00
Kenneth Kehl
4cc97e8c8c upgrade to python 3.12.7 2025-06-26 07:47:08 -07:00
Kenneth Kehl
2f23ff9d8f fix drift analysis 2025-06-26 07:28:25 -07:00
Kenneth Kehl
68ceda6db5 revert python upgrade again 2025-06-25 13:38:29 -07:00
Kenneth Kehl
bc28e3e2f9 upgrade python again to 3.13.2 2025-06-19 06:58:20 -07:00
Kenneth Kehl
a5399ae693 manually roll python back to 3.12.2 2025-06-09 08:59:50 -07:00
Carlo Costino
595ae759d1 Unpin egress proxy release and eventlet dependency
This changeset unpins the egress proxy release now that we have resolved the other issues surrounding the connectivity to S3.  It also makes sure the eventlet dependency is up-to-date.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-06-04 12:12:29 -04:00
Kenneth Kehl
7dfe9c5988 merge from main 2025-05-30 13:30:51 -07:00
Kenneth Kehl
4cbcf3fe27 python upgrade 2025-05-30 10:09:40 -07:00
ccostino
3d44e76383 Update .github/workflows/checks.yml
Removing extraneous vulnerability ignore config.
2025-05-30 10:57:24 -04:00
Kenneth Kehl
038f4e294a merge from main 2025-05-29 14:46:02 -07:00
Kenneth Kehl
3fe74bea54 add exclusion 2025-05-29 11:25:01 -07:00
Carlo Costino
ba0daeaf76 Updated pip-audit ignore-vulns
This changeset updates the PYSEC notices to ignore to due versions that either cannot be fixed or are false positives.  Specifically, this changeset removes previously ignored vulnerability reports and adds PYSEC-2023-312 to the list because it is a false positive and refers to Redis itself, not the Python Redis client (see https://github.com/pypa/advisory-database/issues/237 for details).

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-05-28 17:37:04 -04:00
Kenneth Kehl
665d7b543b upgrade poetry to 2.1.3 2025-05-27 12:44:28 -07:00
Kenneth Kehl
7ba4f3658e upgrade poetry to 2.1.3 2025-05-27 12:32:54 -07:00
Kenneth Kehl
0afc93958c upgrade poetry to 2.1.3 2025-05-27 12:25:52 -07:00
Kenneth Kehl
29db4dcf4d upgrade poetry to 2.1.3 2025-05-27 11:34:11 -07:00
ccostino
db885d14ec Merge pull request #2594 from GSA/sheevdave-patch-2
Update manual_qa_template.yml
2025-05-23 10:48:03 -04:00
Carlo Costino
757803312d Tweaked a couple more of the steps to be in line with the current sign in/out flow
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-05-23 10:39:39 -04:00
Beverly Nguyen
790fe2d6f9 update csp using variables and testing 2025-05-22 12:03:18 -07:00
Sheev Davé
6cc152c07c Update manual_qa_template.yml
Deleted 2FA directions since that's directly managed by login.gov
2025-05-21 13:06:03 -07:00
ccostino
5dcf967941 Merge pull request #2582 from GSA/2581-adding-api_public_url-to-env
Add API_PUBLIC_URL environment variable for public API access
2025-05-20 16:27:51 -04:00
Beverly Nguyen
1b6894139d Fix formatting 2025-05-20 10:27:07 -07:00
Beverly Nguyen
2459ecd715 Fix formatting 2025-05-20 10:26:54 -07:00
alexjanousekGSA
802bda5169 Merge branch 'main' into update-dependabot 2025-05-20 13:11:17 -04:00
alexjanousekGSA
3b8b38d6ad Updated review and assignee name for dependabot 2025-05-20 09:51:11 -04:00
Beverly Nguyen
bc2738a97a Added API_PUBLIC_URL to GitHub Secrets and updated deploy workflows with new API_PUBLIC_URL 2025-05-19 17:22:28 -07:00
Carlo Costino
8b6edf93db Pin egress proxy release
This changeset pins the egress proxy to a previous release to help troubleshoot a potential issue with the underlying Caddy server update.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-05-12 12:51:00 -04:00
alexjanousekGSA
35176328ca Updating virtualenv to specific version 2025-05-05 13:09:03 -04:00
Carlo Costino
50bdf916ba Merge branch 'main' into fix-existing-e2e-tests 2025-05-01 09:45:23 -04:00
Beverly Nguyen
6dd44fdc2d added feature flag 2025-04-10 12:35:04 -07:00
alexjanousekGSA
35f3203e9c Removed feature flag 2025-03-20 14:22:41 -04:00
Carlo Costino
606b124912 Fix existing end-to-end tests
This changeset re-enables our existing end-to-end tests and gets them working again after responding to a security incident.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-03-18 23:24:49 -04:00
Kenneth Kehl
9a8a80ab14 add comment 2025-03-18 10:19:02 -07:00
Kenneth Kehl
cb334c0dcd ugh 2025-03-17 16:28:46 -07:00
Kenneth Kehl
47657d45ed initial 2025-03-17 09:57:15 -07:00
Jonathan Bobel
20012885b1 Update checks.yml 2025-03-04 11:26:21 -05:00
Carlo Costino
fe6921e243 Update Terraform installation and configuration
This changeset accounts for having to explicitly install Terraform and updates our user configuration in several environments to account for team member changes.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-02-19 21:41:32 -05:00
Carlo Costino
eadd8dddb5 Update GitHub Action References
This changeset updates many of our GitHub Action references to point to the latest versions to ensure they are kept up-to-date.  This helps address any improvements and security patches that have been made to them.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-02-19 16:56:09 -05:00
Kenneth Kehl
bd619af421 merge from main 2025-02-03 09:01:12 -08:00
Carlo Costino
d627ba62de Update reference in daily check action
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-01-31 11:08:48 -05:00
Carlo Costino
0ba489df78 Update reference to zaproxy/action-baseline to 0.14.0
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-01-31 10:46:32 -05:00
Carlo Costino
4ae351b1f6 This changeset explicitly enables the FEATURE_ABOUT_PAGE_ENABLED feature flag for our dynamic scans to make sure that all pages are scanned, regardless if they are enabled on our production site or not.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2025-01-30 16:32:12 -05:00