sartography
/
spiff-arena
mirror of https://github.com/sartography/spiff-arena.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
3,220 Commits 37 Branches 58 Tags 117 MiB
Commit Graph

15 Commits

Author SHA1 Message Date
jasquat fe4dc14b8d Feature/docker CVE issues (#558) 
* updated Dockerfile to try to remove security vulnerabilities w/ burnettk

* we require curl for health checks w/ burnettk

* try to scan docker image in ci

* use Dockerfile from backend w/ burnettk

* continue-on-error w/ burnettk

* attempt to elevate permissions of snyk w/ burnettk

* added snyk security github workflow w/ burnettk

* fixed location of constraints w/ burnettk

* add in or true for snyk tests w/ burnettk

* sent the snyk token w/ burnettk

* specify the directory for the sarif file w/ burnettk

* updated spiffworkflow-connector-command for snyk issue w/ burnettk

* updated sql statements sanitize input

* ignore issues for debug_controller and check frontend with snyk w/ burnettk

* updated babel and electron for snyk w/ burnettk

* some more updates to fix vulnerabilities w/ burnettk

* prune repeated deps for frontend builds since

* uncomment ci code so it runs again and use node for frontend base image w/ burnettk

* fixed backend image name w/ burnettk

* pyl w/ burnettk

---------

Co-authored-by: jasquat <jasquat@users.noreply.github.com>
 2023-10-19 14:22:52 -04:00
jasquat c936c02db0 use mysqlclient instead of mysql-connect w/ burnettk (#358) 
* use mysqlclient instead of mysql-connect w/ burnettk

* updated some comments w/ burnettk

* runs tests in parallel in run_pyl

---------

Co-authored-by: jasquat <jasquat@users.noreply.github.com>
Co-authored-by: burnettk <burnettk@users.noreply.github.com>
 2023-07-12 19:44:49 +05:30
burnettk 74c3570a11 more screwing with labels 2023-05-13 22:43:58 -04:00
burnettk 82f262bfcd add opencontainers label, and run an experiment to see what is required in dockerfile vs github actions 2023-05-13 19:53:50 -04:00
jasquat 94776a78b5 some minor tweaks and turn off debug logging for spiff step details w/ burnettk 2023-03-06 16:16:55 -05:00
jasquat 9705244f6c use poetry 1.3.2 2023-03-06 14:41:03 -05:00
jasquat af7f58dd1e fixed pip install command 2023-03-06 14:29:55 -05:00
jasquat 24d2dff5e3 pin to specific version of poetry 2023-03-06 14:22:59 -05:00
burnettk 1a29e123c1 so we do not lose our minds when debugging on a server 2023-02-22 15:16:13 -05:00
burnettk 48781039c7 avoid poetry installing deps when we have them cached if they do not change 2023-02-01 07:53:35 -05:00
burnettk 0e94a4f4cf shuffle around Dockerfile to allow to work for background container 2023-01-31 16:14:22 -05:00
Jakub Sokołowski 3e82ac5f07 backend: avoid redundant steps in Dockerfile 
Use separate `base`, `setup` and `final` to avoid redundat steps.
Avoid runnig `poetry` twice, and add `source` and `description`.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
 2023-01-30 16:23:37 +01:00
Jon Herron 2401f3aa9c Merge commit '89bfc25f35bdfd57eb9ccf6f3a9a3de76e68cf93' 2022-11-09 15:45:49 -05:00
jbirddog 5b01c50d6a Move to Python 3.11 (#27) 2022-11-09 13:45:16 -05:00
Jon Herron c30d6bbe1e Merge commit '883e65384f1e36a0310f4fdcff57ac486890cd5e' as 'spiffworkflow-backend' 2022-10-12 10:22:22 -04:00