Commit Graph

9946 Commits

Author SHA1 Message Date
Kenneth Kehl
6af998a080 notify-api-521 code review feedback and fix code coverage 2023-10-03 07:31:24 -07:00
Kenneth Kehl
2487aeb657 remove debugging 2023-10-02 14:13:25 -07:00
Kenneth Kehl
bd09c63ea9 notify-api-521 fix sms temporary failure message 2023-10-02 14:09:50 -07:00
Carlo Costino
819cbb3353 Merge pull request #523 from GSA/notify-api-520
notify-api-520 persist the provider response even for successful sms …
2023-09-29 16:53:19 -04:00
Kenneth Kehl
8af7a5552f notify-api-520 persist the provider response even for successful sms messages 2023-09-29 13:39:10 -07:00
Steven Reilly
f81f048b5b Merge pull request #517 from GSA/update-zap-scans
Update OWASP ZAP scans
2023-09-29 14:25:29 -04:00
Carlo Costino
d5d432dfd1 Merge pull request #516 from GSA/bulk_testing
Bulk testing
2023-09-29 11:03:26 -04:00
Carlo Costino
66494f9540 Merge pull request #519 from GSA/stvnrlly/setup-streamline
Streamline setup instructions
2023-09-29 11:02:57 -04:00
Steven Reilly
6ae3417ac5 Merge pull request #511 from GSA/dependabot/pip/async-timeout-4.0.3
Bump async-timeout from 4.0.2 to 4.0.3
2023-09-29 10:41:06 -04:00
stvnrlly
cd37c242ba remove unmaintained docker stuff 2023-09-29 10:40:18 -04:00
Steven Reilly
96b224d159 streamline setup instructions 2023-09-29 10:36:39 -04:00
Kenneth Kehl
27197b60bb code review feedback 2023-09-29 07:30:12 -07:00
Carlo Costino
e019e9cf11 Update OWASP ZAP scans
The OWASP ZAP scan GitHub Actions have been updated recently and we need to make sure our GitHub Actions account for the recent changes.  This changeset makes sure we are using the latest version of the OWASP ZAP API scan, the correct Docker image, and adjusts the name of the step to accurately reflect what scan is being run.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-09-28 17:28:27 -04:00
Kenneth Kehl
294723ce62 merge from main 2023-09-28 14:27:39 -07:00
Kenneth Kehl
bebce829af instructions for bulk testing and change delivery receipt delay to 2 minutes 2023-09-28 14:27:16 -07:00
dependabot[bot]
7355a2140c Bump async-timeout from 4.0.2 to 4.0.3
Bumps [async-timeout](https://github.com/aio-libs/async-timeout) from 4.0.2 to 4.0.3.
- [Release notes](https://github.com/aio-libs/async-timeout/releases)
- [Changelog](https://github.com/aio-libs/async-timeout/blob/master/CHANGES.rst)
- [Commits](https://github.com/aio-libs/async-timeout/compare/v4.0.2...v4.0.3)

---
updated-dependencies:
- dependency-name: async-timeout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-27 21:37:00 +00:00
Carlo Costino
6ac331eeef Merge pull request #510 from GSA/notify-api-360
notify-api-360 stop worrying about aws regions
2023-09-27 16:36:47 -04:00
Steven Reilly
a6c563c239 Merge pull request #467 from GSA/adr/auto/0007
Add ADR 0007 to the repo
2023-09-27 13:16:57 -04:00
Kenneth Kehl
f1a4516c9e notify-api-360 stop worrying about aws regions 2023-09-27 08:57:00 -07:00
stvnrlly
5c08762fa8 Merge branch 'main' into adr/auto/0007 2023-09-27 10:40:12 -04:00
stvnrlly
5a4e828e3f add date 2023-09-27 09:47:29 -04:00
Steven Reilly
f32e3f6591 Merge pull request #509 from GSA/dependabot/pip/vulture-2.9.1
Bump vulture from 2.8 to 2.9.1
2023-09-27 09:43:42 -04:00
dependabot[bot]
21fdaeb350 Bump vulture from 2.8 to 2.9.1
Bumps [vulture](https://github.com/jendrikseipp/vulture) from 2.8 to 2.9.1.
- [Release notes](https://github.com/jendrikseipp/vulture/releases)
- [Changelog](https://github.com/jendrikseipp/vulture/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jendrikseipp/vulture/compare/v2.8...v2.9.1)

---
updated-dependencies:
- dependency-name: vulture
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-26 21:52:14 +00:00
Carlo Costino
19ba164708 Merge pull request #506 from GSA/notify-api-360
notify-api-360 messages are hanging in pending forever
2023-09-26 16:31:00 -04:00
Carlo Costino
af22e468d4 Merge pull request #505 from GSA/stvnrlly/one-with
More tiny ADR workflow changes
2023-09-26 16:22:10 -04:00
Kenneth Kehl
2bd4945847 merge from main again 2023-09-26 13:13:58 -07:00
Kenneth Kehl
c69ca3b204 merge from main 2023-09-26 13:13:34 -07:00
stvnrlly
6500d388fe Merge branch 'main' into stvnrlly/one-with 2023-09-26 16:11:30 -04:00
Steven Reilly
ad31276989 Merge pull request #507 from GSA/fix-checks-dynamic-scan
Fix the dynamic-scan job
2023-09-26 16:08:49 -04:00
Carlo Costino
5e0ba6a672 Trying ZAP weekly release instead of stable
I noticed that a previous scan yesterday had referenced the weekly releases under the hood despite being configured for stable.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-09-26 15:47:37 -04:00
Carlo Costino
455b6071ba Updated ZAP Action config to match recent changes
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-09-26 12:09:03 -04:00
Carlo Costino
7887eed891 Fix the dynamic-scan job
This PR fixes the dynamic-scan job, which is now failing in our PR checks due to missing environment variables.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-09-26 11:35:19 -04:00
Kenneth Kehl
309c49dc84 notify-api-360 messages are hanging in pending forever 2023-09-26 08:11:47 -07:00
stvnrlly
b4bf0f8084 only need one with 2023-09-26 09:37:10 -04:00
Steven Reilly
9087125e85 Merge pull request #504 from GSA/dependabot/pip/exceptiongroup-1.1.3
Bump exceptiongroup from 1.1.2 to 1.1.3
2023-09-25 20:46:20 -04:00
dependabot[bot]
aeedb9ecd4 Bump exceptiongroup from 1.1.2 to 1.1.3
Bumps [exceptiongroup](https://github.com/agronholm/exceptiongroup) from 1.1.2 to 1.1.3.
- [Changelog](https://github.com/agronholm/exceptiongroup/blob/main/CHANGES.rst)
- [Commits](https://github.com/agronholm/exceptiongroup/compare/1.1.2...1.1.3)

---
updated-dependencies:
- dependency-name: exceptiongroup
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-25 21:40:14 +00:00
Carlo Costino
cc5b114bcd Merge pull request #500 from GSA/stvnrlly/adr-yaml-lint
Valid YAML for ADR workflow
2023-09-25 17:17:17 -04:00
Kenneth Kehl
6eeabab8a2 Merge pull request #502 from GSA/debug
add debug for check sms deliver receipt bug
2023-09-25 13:31:11 -07:00
Kenneth Kehl
5e2d65a348 add debug for check sms deliver receipt bug 2023-09-25 13:22:21 -07:00
Carlo Costino
5e2bc93331 Merge pull request #492 from GSA/notify-admin-768
notify-admin-768 fix 'Sent by' column on csv download reports
2023-09-25 14:00:21 -04:00
Kenneth Kehl
21f9bb46d1 merge from main 2023-09-25 07:34:49 -07:00
Steven Reilly
3130517f35 Merge pull request #499 from GSA/dependabot/pip/black-23.9.1
Bump black from 23.7.0 to 23.9.1
2023-09-25 09:50:25 -04:00
stvnrlly
6070c97ad0 have valid yaml instead of invalid yaml 2023-09-22 22:15:53 -04:00
Steven Reilly
9eb7c92461 Merge pull request #481 from GSA/stvnrlly/docs-91823
Doc updates for logs and env vars
2023-09-22 22:12:13 -04:00
Steven Reilly
6c6762b2ce Update docs/all.md
Co-authored-by: Carlo Costino <ccostino@users.noreply.github.com>
2023-09-22 21:59:47 -04:00
Steven Reilly
ec48d436d6 Update docs/all.md
Co-authored-by: Carlo Costino <ccostino@users.noreply.github.com>
2023-09-22 21:59:24 -04:00
Steven Reilly
f5a486be78 Update docs/all.md
Co-authored-by: Carlo Costino <ccostino@users.noreply.github.com>
2023-09-22 21:59:09 -04:00
Steven Reilly
bc39606e3c Merge pull request #498 from GSA/stvnrlly/adr-perm
Add workflow permission for ADR automation
2023-09-22 21:58:53 -04:00
dependabot[bot]
f6889efa0a Bump black from 23.7.0 to 23.9.1
Bumps [black](https://github.com/psf/black) from 23.7.0 to 23.9.1.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/23.7.0...23.9.1)

---
updated-dependencies:
- dependency-name: black
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-22 21:57:11 +00:00
stvnrlly
b61ca002c3 add workflow permission 2023-09-22 17:03:04 -04:00