Commit Graph

102 Commits

Author SHA1 Message Date
stvnrlly
a99c01eb14 move checks to daily run only 2023-07-11 21:35:15 -04:00
stvnrlly
2f74d35e48 fix spelling error 2023-07-11 21:32:35 -04:00
stvnrlly
6e3b6901be try bandit artifact 2023-07-11 21:31:14 -04:00
stvnrlly
f75b720a27 add step to pr check to test it 2023-07-11 17:29:13 -04:00
stvnrlly
f8d23f8c45 try to create pip-audit artifact in daily test 2023-07-11 17:19:07 -04:00
Kenneth Kehl
fe81725a10 remove target branch because we want each upgrade in separate branch 2023-06-26 08:57:40 -07:00
Kenneth Kehl
d217b5348b move dependabot file 2023-06-26 08:41:18 -07:00
Carlo Costino
df48d74aee Fix ADR issue template (#302)
* Fix ADR issue template

This changeset fixes an issue with the ADR issue template:  names must be unique!

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-06-21 14:36:19 -04:00
Carlo Costino
e89d30bfd7 Fix issues and update ADRs (#303)
This changeset fixes a few lingering typos and incorrect information in the ADRs and updates them with some final decisions.  It also fixes an issue with the ADR creation form for GitHub.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-06-20 16:51:32 -04:00
Carlo Costino
6c6026acf7 Update ADR details
This changeset updates our ADR documentation to include notes on draft and private ADRs that need to live outside of GitHub.  It updates the README with this information and also introduces an "implemented" flag in addition to the ADR status itself.  This is reflected in the ADR templates.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-06-13 16:15:52 -04:00
Carlo Costino
5c83ed0643 Add timezone and invite expiration ADRs (#292)
This changeset adds two new ADRs:

- ADR-0002:  Determine How to Handle Timezones in US Notify
- ADR-0003:  Implementing Invite Expirations

It also includes a config.yml file for GitHub that was missing in a previous PR to enable the new ADR issue template and form.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-06-07 12:37:36 -04:00
Carlo Costino
cb97df080e Create custom ADR GitHub template(s) (#290)
This changeset adds a custom issue template and form for use within GitHub itself to help draft new Architectural Decision Records (ADRs).

Note that we'll still ultimately have to create the actual ADR as a Markdown file that lives in the `doc/adrs/` folder.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2023-06-06 15:35:56 -04:00
Ryan Ahearn
0d685df51c Enable prod terraform drift check 2023-05-08 15:29:12 -04:00
Ryan Ahearn
58ad32b560 Enable production deploy 2023-05-08 10:47:01 -04:00
Steven Reilly
6515c44ca8 bump pip-audit action to 1.0.6 (#261) 2023-05-05 14:11:18 -04:00
Ryan Ahearn
f6cc141f58 Switch cg-egress-proxy back to main branch 2023-04-28 16:03:33 -04:00
Ryan Ahearn
039442a456 Deploy app to cflinuxfs4 stack 2023-04-27 14:49:49 -04:00
Ryan Ahearn
26cc90e1f2 Deploy bundled proxy instead of building it each time 2023-04-21 11:57:42 -04:00
Andrew Shumway
b623caa366 Test actions with 50% threshold 2023-04-19 09:20:22 -06:00
Andrew Shumway
7e4043f85a Test github actions coverage PR fail 2023-04-19 08:56:34 -06:00
Andrew Shumway
cbcb955f1f Moved env: flag under test run 2023-04-18 15:48:10 -06:00
Andrew Shumway
17c6083f6d Check coverage in actions without omit 2023-04-18 14:27:56 -06:00
Andrew Shumway
1047b70792 Added fail coverage threshold under 50% 2023-04-18 13:51:48 -06:00
Ryan Ahearn
6118394f02 Remove ignore-vulnerability for remediated redis vuln 2023-03-29 17:04:43 -04:00
Ryan Ahearn
8e64fb12ba Ignore known issue with redis 4.5.3 2023-03-28 09:06:21 -04:00
Ryan Ahearn
d341a8f4c4 Run terraform on deploy when shared modules change 2023-03-27 08:43:49 -04:00
Ryan Ahearn
46f59bfd14 Run restage workflow by hand 2023-03-21 17:51:06 -04:00
Ryan Ahearn
07f3e66171 Add infrastructure drift detector 2023-03-20 14:11:01 -04:00
Ryan Ahearn
84e7e9b5cf Use credentials output by terraform/development 2023-03-13 13:44:10 -04:00
Ryan Ahearn
cb4ab8fb16 Remove obsolete references to AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY 2023-03-03 15:45:04 -05:00
Ryan Ahearn
36975dda07 Ensure CI runs have proper phone number format 2023-03-03 14:13:58 -05:00
Ryan Ahearn
28f8649444 Use sns credentials from VCAP_SERVICES 2023-02-28 16:50:00 -05:00
Ryan Ahearn
3d4ff1a1f0 Switch back to official egress proxy repo 2023-02-14 12:15:22 -05:00
Ryan Ahearn
cdf2810b14 Update flask & cryptography versions 2023-02-09 17:26:36 -05:00
Ryan Ahearn
c54a207c57 Update proxy settings to enable sending data to new relic 2023-01-24 13:48:38 -05:00
Ryan Ahearn
c3faf3df4d Install newrelic before attempting to validate config 2023-01-19 09:38:18 -05:00
Ryan Ahearn
b9a53b7b54 Validate new relic config in github actions 2023-01-19 09:33:33 -05:00
Ryan Ahearn
0652b21521 Set new relic license key via env var 2023-01-18 10:49:39 -05:00
Ryan Ahearn
bec3c53128 Setup newrelic for cloud.gov environments 2023-01-18 09:20:22 -05:00
Ryan Ahearn
a4349975e5 Merge branch 'main' into sms-provider-cleanup
* main:
  Update to most recent pip-audit action
  Remove restart: always from devcontainer
  simplify to use the script for this exact purpose
  simplify cleanup steps
  update sandbox teardown steps
2023-01-03 10:23:55 -05:00
Ryan Ahearn
7e02e6b33d Update to most recent pip-audit action 2023-01-03 09:44:53 -05:00
Ryan Ahearn
d70e1b125a Remove NOTIFY_EMAIL_DOMAIN override in CI test runs 2022-12-22 10:52:08 -05:00
Ryan Ahearn
7c611e993f Read openapi schema for the owasp scan 2022-11-16 15:50:08 -05:00
Ryan Ahearn
4e631b5cc2 Switch to gsa repo for cg-egress-proxy source 2022-11-15 14:51:41 -05:00
Ryan Ahearn
e0163feee0 Fix typo in working-directory action key name 2022-11-14 11:08:25 -05:00
Ryan Ahearn
171d039e72 Update list of files for deploy-proxy to watch in demo 2022-11-14 10:01:23 -05:00
Ryan Ahearn
fb0fbb984e Enable deploying exact version of cg-egress-proxy 2022-11-14 09:49:31 -05:00
Ryan Ahearn
e525f2ae9b Build caddy binary as part of the egress proxy deploy 2022-11-09 10:21:04 -05:00
Ryan Ahearn
82847d3f71 Only deploy egress proxy if the config changed 2022-11-08 16:11:15 -05:00
Ryan Ahearn
2c140409df Fix typo 2022-11-08 14:57:35 -05:00