This changeset updates the Terraform user configuration in several environments to factor in team member changes, and reverts the previous change to the staging deploy to see if there was an issue with the last update which is preventing the workflow from running now.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset updates many of our GitHub Action references to point to the latest versions to ensure they are kept up-to-date. This helps address any improvements and security patches that have been made to them.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset updates our GitHub Action for dynamic scans to use the latest release of the zaproxy-api-scan.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset updates the reference of the upload_artifacts action from GitHub to be v4 instead of v3. v3 is being deprecated at the end of January 2025.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset updates our restage workflow and GitHub action to use the latest version of the cg-cli-tools to help prevent future issues with performing restage actions for our apps.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset adds a Python vulnerability that we need to ignore because it was incorrectly applied to the Python Redis module. This is a vulnerability with an older version of Redis itself, not the Python module.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset finalizes our updates for the cg-cli-tools across all environments and restores the check for updates to the egress proxy before deploying.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset updates the egress proxy deployment steps to match the admin repo, based on lessons learned there.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset tries to wrap the Login.gov registration URL with quotes to get it to be properly handled in the shell environment using the same pattern as the secret variables.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset tries to wrap the Login.gov registration URL with quotes to get it to be properly handled in the shell environment.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset attempts to fix another issue with the deploy command by setting and referring to an environment variable directly.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset will hopefully fix the reference to the LOGIN_DOT_GOV_REGISTRATION_URL env var in the new cf_command.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
