Commit Graph

128 Commits

Author SHA1 Message Date
Kenneth Kehl
c491b4152c initial 2024-06-17 13:55:25 -07:00
Kenneth Kehl
309c168f52 revert back to 100% confidence level for vulture and add a comment 2024-05-20 11:18:31 -07:00
Kenneth Kehl
5bc652db9e change vulture rules in Makefile 2024-05-20 07:13:19 -07:00
Carlo Costino
9a83ba7475 Localize notification_utils to the admin
This changeset pulls in all of the notification_utils code directly into the admin and removes it as an external dependency. We are doing this to cut down on operational maintenance of the project and will begin removing parts of it no longer needed for the admin.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-05-16 10:37:37 -04:00
Carlo Costino
5b4d5118d8 Merge pull request #1346 from GSA/notify-admin-1336
Add end-to-end test: Sending a message from existing template
2024-04-09 17:08:01 -04:00
Carlo Costino
616957c103 Added an explicit sync of the poetry.lock file to make bootstrap to make sure dependency updates will work
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-04-03 17:31:15 -04:00
Kenneth Kehl
11bfc829e7 works locally and maybe on github as well 2024-03-26 10:45:17 -07:00
Kenneth Kehl
edf3961f0d works locally and maybe on github as well 2024-03-26 10:30:11 -07:00
Kenneth Kehl
c4a594663b put back firefox tests 2024-03-26 09:57:16 -07:00
Kenneth Kehl
e1be811ed5 only test chromium right now 2024-03-26 07:57:45 -07:00
Carlo Costino
fd5cd36959 Remove webkit testing for now
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-02-23 11:09:38 -05:00
Carlo Costino
40de352f9e Update README with new instructions and improve setup
This changeset updates the README.md file with a set of entirely new instructions. These updates are intended to improve clarity, simplify steps, and reduce confusion and environment-setup gotchas that folks have run into previously and we have learned from. A couple of other changes are also included:

- Minor adjustments to the Makefile to improve make bootstrap
- Updates to the sample.env file to include previously missing required environment variables and/or information
- Additional support for Python virtual environments
- Removes tracking of the .python-version file used by pyenv

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-11-22 14:05:20 -05:00
Carlo Costino
09c4dd2e1d Update more dependencies and fix notifications-utils
This changeset updates a few more dependencies and addresses the challenges we have had in keeping the notifications-utils dependency up-to-date.  The changes include instructions on what to do going forward for future notifications-utils updates.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-11-01 12:16:35 -04:00
Carlo Costino
88f0715b2c Updated dependencies and add make command
This changeset updates several dependencies to address security audit findings and also adds a py-lock make command to make managing our Python dependencies more manageable.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-10-30 16:01:21 -04:00
Kenneth Kehl
e8d7d91402 switch from pipenv to poetry 2023-09-01 07:56:02 -07:00
Kenneth Kehl
51b6c38e2f refresh PR? 2023-08-25 12:58:53 -07:00
Carlo Costino
d79e15c2a1 Clean up state of E2E tests
This changeset takes care of leaving E2E tests in a clean state so that
we can revisit the work later.  The efforts to add authentication
support did not pan out, so we will go a different route in the near
future.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-08-24 15:31:21 -04:00
Steven Reilly
9fc44a352b Merge branch 'main' into notify-api-387 2023-08-22 17:45:04 -04:00
Kenneth Kehl
621c381de8 add dead code command to Makefile 2023-08-08 13:16:20 -07:00
Kenneth Kehl
d36c70ed16 notify-api-387 scan projects for unused code 2023-08-08 12:12:15 -07:00
Kenneth Kehl
b92f386290 notify-api-387 scan projects for unused code 2023-08-08 11:00:09 -07:00
Kenneth Kehl
4dd3679c4f change failure to be C, D, or F 2023-08-07 10:58:32 -07:00
Kenneth Kehl
1ddc821dd1 notify-api-386 scan projects for code complexity 2023-08-07 10:41:07 -07:00
Steven Reilly
eec2caa6e4 Merge branch 'main' into notify-admin-638 2023-07-28 11:04:45 -04:00
Carlo Costino
b5664c3d20 Add support for E2E (end-to-end) tests (#625)
This changeset lays the foundation for supporting E2E (end-to-end) integration tests for US Notify.  It brings in the Playwright testing framework along with the Playwright pytest plugin to make this possible, and includes the following adjustments:

- A new test session fixture for ensuring that Playwright authenticates with the sites that are currently behind HTTP Auth (requies env-var config)
- A new end_to_end test directory specifically for E2E tests
- Updates to the Makefile that make sure E2E tests are not run as a part of the normal test routine but can be run separately
- A new command in the Makefile to run E2E tests that will run in Chromium, Firefox, and Webkit headless browsers

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-07-28 09:31:45 -04:00
Kenneth Kehl
6188f7bc74 notify-admin-638 adjust coverage report to fail under 96% 2023-07-20 13:20:22 -07:00
Andrew Shumway
948ee68193 Added code coverage test to pipfile/makefile/workflow (#472)
Co-authored-by: stvnrlly <steven.reilly@gsa.gov>
2023-04-28 11:17:02 -04:00
Ryan Ahearn
80184a98fd Remove ignore-vulnerability line for remediated redis vuln 2023-03-29 16:55:42 -04:00
Ryan Ahearn
1fe0ad0d83 Ignore known issue with redis 4.5.3 2023-03-28 09:16:09 -04:00
Ryan Ahearn
703847e184 Respect HTTP_PROTOCOL config when forcing https 2023-03-08 10:48:22 -05:00
Ryan Ahearn
73a3511ef2 Remove uses of inline-styles 2023-03-08 09:08:07 -05:00
Ryan Ahearn
23f6f3c726 Report data to newrelic 2023-01-23 10:00:03 -05:00
Ryan Ahearn
197c17c1a9 Update pip-audit gh action 2023-01-03 09:59:27 -05:00
stvnrlly
e44fe2eb11 switch to pipenv 2022-11-08 09:44:09 -05:00
Ryan Ahearn
c045771b76 Run js-lint as part of the full test target 2022-10-27 16:01:54 +00:00
Ryan Ahearn
98b772f959 Separate test and lint steps 2022-10-27 11:10:13 -04:00
Ryan Ahearn
773cd99790 Only run pip-audit on runtime dependencies in CI 2022-10-19 10:39:46 -04:00
jimmoffet
3121e7bc47 update reqs to use GSA/notifications-utils 2022-09-06 18:34:30 -07:00
Ryan Ahearn
251ac133b5 Source nvmsh as part of a11y-scan 2022-09-02 13:29:56 -04:00
Ryan Ahearn
dfea3ac848 Install pa11y-ci 2022-08-30 10:37:33 -04:00
Ryan Ahearn
8b6210eedb Add python static scan task 2022-08-26 14:12:26 +00:00
Ryan Ahearn
fa7b1a41b8 Add python and npm audits to checks.yml 2022-08-25 16:55:33 -04:00
Ryan Ahearn
bdee795f56 Switch first nvm source to --no-use instead of --install 2022-08-09 09:23:47 -04:00
Ryan Ahearn
3ff922bb07 Source nvm from either $HOME or /usr/local/share 2022-08-08 14:43:13 -04:00
jimmoffet
dad051a662 2767 passing 2022-08-05 00:25:03 -07:00
Jim Moffet
e17c26d1f6 config buckets 2022-06-23 14:08:29 -07:00
Jim Moffet
18eefc87c0 clean makefile 2022-06-13 14:31:51 -07:00
Jim Moffet
2b727e13b4 local dev upgrades 2022-06-13 14:26:46 -07:00
Ben Thorner
b348e8ed03 Add better-npm-audit to check production packages
This is the same as [^1].

[^1]: https://github.com/alphagov/document-download-frontend/pull/120
2022-05-09 12:05:42 +01:00
Ben Thorner
d97ed69f0b Turn off NPM auditing on installation
This isn't useful as it mostly pertains to dev dependencies, where
we're not concerned about vulnerabilities as they run in isolation.
2022-05-06 12:31:52 +01:00