Ryan Ahearn
db62e318ca
Address moderate and low owasp findings
...
* CORS headers removed because browsers should not interact with API directly
* Updated error handling to return expected content-type for JSON error messages
2023-04-19 09:27:24 -04:00
Ryan Ahearn
81f36182e8
Merge pull request #232 from GSA/remove-contact-list-upload
...
Remove contact list upload bucket & db table (API)
2023-04-14 12:05:10 -04:00
Ryan Ahearn
b223f0c249
Force redeploy of egress proxies
2023-04-12 16:11:10 -04:00
Ryan Ahearn
e07b596857
Remove contact list db, dao, and s3 code
2023-04-12 15:01:24 -04:00
Ryan Ahearn
f7418d62cb
Remove ServiceContactList from db
2023-04-12 13:30:13 -04:00
Kenneth Kehl
27d86c949a
#224 remove crown ( #228 )
...
Co-authored-by: Kenneth Kehl <@kkehl@flexion.us >
2023-04-11 16:29:37 -04:00
Steven Reilly
25a89458c8
remove real endpoint from test suite ( #227 )
2023-04-11 12:24:01 -04:00
Steven Reilly
7038ffb0a4
Merge pull request #225 from GSA/iam-rule-testing
...
Keep development SES & SNS keys open
2023-04-06 10:56:47 -04:00
Ryan Ahearn
180184e58d
Ensure developers can still access SES & SNS from workstations
2023-03-31 15:35:26 -04:00
Ryan Ahearn
67e9399a22
Clean up sandbox deploy docs
2023-03-31 09:32:13 -04:00
Ryan Ahearn
ac20a0ed65
Bring bootstrap module back into working order with versioned s3 module
2023-03-31 07:54:06 -04:00
Ryan Ahearn
8bcb9f3aae
Merge pull request #221 from GSA/redis-4.5.4
...
Update dependencies (API)
2023-03-29 17:23:52 -04:00
Ryan Ahearn
6118394f02
Remove ignore-vulnerability for remediated redis vuln
2023-03-29 17:04:43 -04:00
Ryan Ahearn
7fec60c473
Update dependencies
2023-03-29 17:04:27 -04:00
Ryan Ahearn
eac89ac300
Merge pull request #218 from GSA/ignore-known-redis-vuln
...
Ignore known issue with redis 4.5.3 (API)
2023-03-28 11:16:49 -04:00
Ryan Ahearn
8e64fb12ba
Ignore known issue with redis 4.5.3
2023-03-28 09:06:21 -04:00
Ryan Ahearn
a528282c13
Merge pull request #216 from GSA/dependabot/pip/redis-4.5.3
...
Bump redis from 4.5.1 to 4.5.3
2023-03-28 08:28:24 -04:00
dependabot[bot]
c4b725c7ba
Bump redis from 4.5.1 to 4.5.3
...
Bumps [redis](https://github.com/redis/redis-py ) from 4.5.1 to 4.5.3.
- [Release notes](https://github.com/redis/redis-py/releases )
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES )
- [Commits](https://github.com/redis/redis-py/compare/v4.5.1...v4.5.3 )
---
updated-dependencies:
- dependency-name: redis
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-03-27 21:49:15 +00:00
Ryan Ahearn
517d4da20e
Merge pull request #215 from GSA/update-system-description-link
...
Update link to usnotify-ssb
2023-03-27 15:29:38 -04:00
Ryan Ahearn
25c36fea45
Update link to usnotify-ssb
2023-03-27 15:10:36 -04:00
Ryan Ahearn
bac9978ce2
Merge pull request #212 from GSA/update-terraform-triggers
...
Run terraform on deploy when shared modules change
2023-03-27 10:42:39 -04:00
Ryan Ahearn
d341a8f4c4
Run terraform on deploy when shared modules change
2023-03-27 08:43:49 -04:00
Ryan Ahearn
4039f76a87
Merge pull request #209 from GSA/fix-demo-egress-config
...
Allow demo to send SMS via us-east-1 region through proxy
2023-03-24 11:24:15 -04:00
Ryan Ahearn
c64bc49621
Allow demo to send SMS via us-east-1 region through proxy
2023-03-24 11:08:17 -04:00
Ryan Ahearn
111891751e
Merge pull request #205 from GSA/restage-apps
...
Add workflow to restage apps
2023-03-22 10:28:57 -04:00
Ryan Ahearn
7fd68ef8d4
Merge pull request #204 from GSA/bind-sns-numbers
...
Configure default SMS from-number in production
2023-03-22 10:11:30 -04:00
Ryan Ahearn
3c8aa65595
Match prod space name to environment name
2023-03-21 17:51:06 -04:00
Ryan Ahearn
46f59bfd14
Run restage workflow by hand
2023-03-21 17:51:06 -04:00
Ryan Ahearn
7ddf125807
Enable SMS in production account
2023-03-21 14:28:32 -04:00
Ryan Ahearn
41c1e6d4bb
Set default phone number for sandbox env
2023-03-21 14:23:57 -04:00
Ryan Ahearn
82871abc7e
Merge pull request #202 from GSA/terraform-drift
...
Add infrastructure drift detector
2023-03-20 16:21:29 -04:00
Ryan Ahearn
303595d16b
Add warning about database backups
2023-03-20 15:53:30 -04:00
Ryan Ahearn
3a21787089
Add documentation about nightly GitHub Actions scans
2023-03-20 15:50:47 -04:00
Ryan Ahearn
07f3e66171
Add infrastructure drift detector
2023-03-20 14:11:01 -04:00
Ryan Ahearn
5f56186859
Merge pull request #197 from GSA/dev-infra-setup
...
Add scripts for provisioning development credentials
2023-03-15 16:40:40 -04:00
Ryan Ahearn
bea7a55e4a
Make sure we're in the correct directory
...
this will make relative paths and terraform find the correct files
2023-03-15 16:24:02 -04:00
Steven Reilly
8d87b6ec09
Add a total-message daily limit ( #195 )
2023-03-14 16:28:38 -04:00
Ryan Ahearn
9eb075f074
Address PR feedback
2023-03-14 15:36:32 -04:00
Ryan Ahearn
778a41a1cb
Put api in key name so we can easily add a key for shared buckets to admin
2023-03-13 14:15:22 -04:00
Ryan Ahearn
84e7e9b5cf
Use credentials output by terraform/development
2023-03-13 13:44:10 -04:00
Ryan Ahearn
627149402c
Add terraform/development for retrieving credentials for local development use
2023-03-13 13:44:10 -04:00
Steven Reilly
886db509a0
update docs for project setup ( #190 )
2023-03-07 09:56:12 -05:00
Ryan Ahearn
a0fab5546e
Merge pull request #189 from GSA/remove-letters-permissions
...
Drop send_letters permissions for existing users
2023-03-06 09:34:26 -05:00
Ryan Ahearn
8b0d8ceb8b
Drop send_letters permissions for existing users
2023-03-06 09:16:25 -05:00
Ryan Ahearn
3ad64e7176
Merge pull request #187 from GSA/use-sns-service
...
Use sns service
2023-03-03 16:42:39 -05:00
Ryan Ahearn
22aa7e2787
Remove default creds from s3 module
2023-03-03 16:01:12 -05:00
Ryan Ahearn
cb4ab8fb16
Remove obsolete references to AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY
2023-03-03 15:45:04 -05:00
Ryan Ahearn
40ec79e74c
Only use service sender value if it is valid for SNS OriginationNumber
2023-03-03 15:40:21 -05:00
Ryan Ahearn
36975dda07
Ensure CI runs have proper phone number format
2023-03-03 14:13:58 -05:00
Ryan Ahearn
c58a151e65
Merge branch 'main' into use-sns-service
...
* main:
Remove letters-related code (#175 )
2023-03-03 08:53:32 -05:00