This changeset pins the egress proxy to a previous release to help troubleshoot a potential issue with the underlying Caddy server update.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset addresses a conflict we had with an update to virtualenv that is preventing our project build steps from working.
Note that this is a temporary fix of sorts until we can get poetry fully updated along with a few other dependencies.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset updates the Terraform user configuration in several environments to factor in team member changes, and reverts the previous change to the staging deploy to see if there was an issue with the last update which is preventing the workflow from running now.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset updates many of our GitHub Action references to point to the latest versions to ensure they are kept up-to-date. This helps address any improvements and security patches that have been made to them.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset updates our GitHub Action for dynamic scans to use the latest release of the zaproxy-api-scan.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset updates the reference of the upload_artifacts action from GitHub to be v4 instead of v3. v3 is being deprecated at the end of January 2025.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset updates our restage workflow and GitHub action to use the latest version of the cg-cli-tools to help prevent future issues with performing restage actions for our apps.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset adds a Python vulnerability that we need to ignore because it was incorrectly applied to the Python Redis module. This is a vulnerability with an older version of Redis itself, not the Python module.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This changeset finalizes our updates for the cg-cli-tools across all environments and restores the check for updates to the egress proxy before deploying.
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
alexjanousekGSA