Commit Graph

  • 55a6fb988d
    Bump codecov/codecov-action from 5.0.7 to 5.1.1 dependabot[bot] 2024-12-06 14:47:45 +00:00
  • 95005d5c66
    Bump ruff from 0.8.1 to 0.8.2 in /spiffworkflow-backend (#2181) dependabot[bot] 2024-12-06 14:43:28 +00:00
  • d534ad6abf
    Bump @carbon/react from 1.44.0 to 1.72.0 in /spiffworkflow-frontend dependabot[bot] 2024-12-06 14:26:42 +00:00
  • 031445cea0
    Bump ruff from 0.8.1 to 0.8.2 in /spiffworkflow-backend dependabot[bot] 2024-12-06 14:23:49 +00:00
  • 0ed6eaac8f
    Fix comment (#2180) Bret Mogilefsky 2024-12-05 10:32:37 -08:00
  • 13087f4d49
    Fix comment Bret Mogilefsky 2024-12-05 10:29:58 -08:00
  • 51bd739bb2
    use same severities for sarif w/ burnettk jasquat 2024-12-05 11:51:58 -05:00
  • 8d6d3aae49
    update trivy action to latest w/ burnettk jasquat 2024-12-05 11:41:19 -05:00
  • fc4dff6dfd
    Fail fast off (#2179) jasquat 2024-12-05 11:19:56 -05:00
  • 642796640b
    remove test dockerfile w/ burnettk jasquat 2024-12-05 11:19:36 -05:00
  • 5315c341b0
    also update libaom w/ burnettk jasquat 2024-12-05 11:17:24 -05:00
  • ab1a1fff52
    attempt to fix frontend and backend as well w/ burnettk jasquat 2024-12-05 11:15:24 -05:00
  • 94e9b22537
    update apt-get packages for connector proxy to fix trivy w/ burnettk jasquat 2024-12-05 11:01:40 -05:00
  • 354401b793
    fail only for critical and do not fail fast so we can get the scans for the other images as well w/ burnettk jasquat 2024-12-05 10:48:00 -05:00
  • 1c4001bd08
    upload trivy file only if it has been created w/ burnettk jasquat 2024-12-05 10:38:12 -05:00
  • a065266e2f
    Only scan amd64-arch image for vulns (#2176) Bret Mogilefsky 2024-12-05 07:12:11 -08:00
  • 17082e9fc1
    Bump apscheduler from 3.10.4 to 3.11.0 in /spiffworkflow-backend (#2178) dependabot[bot] 2024-12-05 14:36:41 +00:00
  • 87d7bbbb9a
    Bump sonarsource/sonarcloud-github-action from 3.1.0 to 4.0.0 (#2177) dependabot[bot] 2024-12-05 14:28:24 +00:00
  • 504cd32b3d
    Bump apscheduler from 3.10.4 to 3.11.0 in /spiffworkflow-backend dependabot[bot] 2024-12-05 14:16:19 +00:00
  • 697abf32bc
    Bump sonarsource/sonarcloud-github-action from 3.1.0 to 4.0.0 dependabot[bot] 2024-12-05 14:08:29 +00:00
  • f67650a7dc
    Add comment for future coders Bret Mogilefsky 2024-12-04 16:30:11 -08:00
  • e12fbd2fb3
    Only scan amd64-arch image for vulns Bret Mogilefsky 2024-12-04 16:18:08 -08:00
  • 55f550ca96
    Bump ruff from 0.5.5 to 0.8.1 in /spiffworkflow-backend (#2172) dependabot[bot] 2024-12-04 16:16:46 +00:00
  • 4c24a6c53c
    Refactor image build to use a matrix build, add security scanning (#2174) Bret Mogilefsky 2024-12-04 07:56:46 -08:00
  • 84470ce5bc
    Bump @carbon/react from 1.44.0 to 1.71.1 in /spiffworkflow-frontend dependabot[bot] 2024-12-04 14:45:03 +00:00
  • 7cd38a3a22
    Changed recreate_db to skip non sqlite attributes (#2168) Twentyninehairs 2024-12-04 06:39:12 -08:00
  • 1b9e917e06
    Comment on the new permission required Bret Mogilefsky 2024-12-03 21:29:50 -08:00
  • 57a7f29c3b
    Scan for vulns before pushing images Bret Mogilefsky 2024-12-03 21:23:25 -08:00
  • ba57435acc
    Add caching to image build step Bret Mogilefsky 2024-12-03 20:47:14 -08:00
  • dd33f987b8
    Improve description of connector-proxy-demo image Bret Mogilefsky 2024-12-03 20:46:21 -08:00
  • 0a9fe4f5a7
    Refactor image build GH Action to use a matrix build Bret Mogilefsky 2024-12-03 20:35:06 -08:00
  • 0585fbdc02 Removed my personal debugging echo statements from recreate_db Kenny 2024-12-03 15:16:34 -08:00
  • 76205aae6e reverted frontend config.tsx and vite.config.ts Kenny 2024-12-03 15:11:07 -08:00
  • bdb010fda1
    updated snyk configs to ignore werkzeug issues since we cannot upgrade it w/ burnettk (#2173) jasquat 2024-12-03 11:44:08 -05:00
  • 96a1d16c43
    updated snyk configs to ignore werkzeug issues since we cannot upgrade it w/ burnettk jasquat 2024-12-03 11:38:06 -05:00
  • 8a03f994df
    Bump ruff from 0.5.5 to 0.8.1 in /spiffworkflow-backend dependabot[bot] 2024-12-03 14:35:21 +00:00
  • a3c5219a94
    Enable using read-only HTTPS repositories (#2171) Bret Mogilefsky 2024-12-03 03:48:56 -08:00
  • f05522e0a6
    Add comment on ssh vs https behavior Bret Mogilefsky 2024-12-02 20:54:06 -08:00
  • d35ec0cee2
    Enable using read-only HTTPS repositories Bret Mogilefsky 2024-12-02 20:42:28 -08:00
  • 995a980007
    Bump flask-jwt-extended from 4.6.0 to 4.7.1 in /spiffworkflow-backend (#2167) dependabot[bot] 2024-12-02 19:52:05 +00:00
  • 14fd5b1c94
    Bump flask-jwt-extended from 4.6.0 to 4.7.1 in /spiffworkflow-backend dependabot[bot] 2024-12-02 19:29:10 +00:00
  • 48532485f7
    remove the version restriction for gunicorn (#2170) jasquat 2024-12-02 14:26:53 -05:00
  • 60042b6c00
    ignore werkzeug safety issues w/ burnettk jasquat 2024-12-02 14:03:18 -05:00
  • ad8fbc739f
    remove the version restriction for gunicorn w/ burnettk jasquat 2024-12-02 13:59:12 -05:00
  • 782cdbf1ce
    put gunicorn back downgrade-gunicorn burnettk 2024-12-02 13:39:20 -05:00
  • b355989702 reverted pyproject.toml Kenny 2024-12-02 08:17:19 -08:00
  • 56c5099ef2 reverted poetry.lock Kenny 2024-12-02 08:14:09 -08:00
  • def33b235f
    Message race (#2165) v0.0.62 jasquat 2024-12-02 11:10:10 -05:00
  • b2cfe57f27 reverted package-lock.json Kenny 2024-12-02 08:01:48 -08:00
  • 60be99d7c3 Changed recreate_db to skip non sqlite attributes Kenny 2024-12-02 07:40:33 -08:00
  • 5bbfa5d767
    avoid test load script w/ burnettk jasquat 2024-11-27 16:23:57 -05:00
  • 573f417853
    some cleanup w/ burnettk jasquat 2024-11-27 16:17:11 -05:00
  • c662b4a1f0
    Use shell=False in subprocess Function Calls pixeebot/message-race pixeebot[bot] 2024-11-27 21:14:03 +00:00
  • f6a0bd8396
    Sandbox Process Creation pixeebot[bot] 2024-11-27 21:14:02 +00:00
  • 8522db35ce
    fixed tests w/ burnettk jasquat 2024-11-27 16:08:58 -05:00
  • b9ee34c72d
    do not save items on message start event w/ burnettk jasquat 2024-11-27 15:57:25 -05:00
  • 480592b308
    current state, db.session.begin did not actually help w/ burnettk jasquat 2024-11-27 14:40:25 -05:00
  • c9d7686e06
    load script burnettk 2024-11-27 12:03:39 -05:00
  • 59a66d8851
    add failure log burnettk 2024-11-27 11:57:49 -05:00
  • b3e3791cea
    more deubbing w/ burnettk jasquat 2024-11-27 11:49:54 -05:00
  • d9b3f8a9a6
    safe exception handling burnettk 2024-11-27 11:44:20 -05:00
  • 0b16c8fd16
    some more debugging w/ burnettk jasquat 2024-11-27 11:35:03 -05:00
  • 711c32cc80
    repro message race condition burnettk 2024-11-27 10:58:28 -05:00
  • ee3d545cf4
    Bump safety from 3.2.7 to 3.2.11 in /spiffworkflow-backend (#2164) dependabot[bot] 2024-11-27 14:51:39 +00:00
  • 97a116f0c3
    Bump safety from 3.2.7 to 3.2.11 in /spiffworkflow-backend dependabot[bot] 2024-11-27 14:32:18 +00:00
  • f9556bf730
    Verify JWT Decode pixeebot[bot] 2024-11-27 03:24:17 +00:00
  • a0a9943328
    Bump docker/build-push-action from 6.9.0 to 6.10.0 (#2161) dependabot[bot] 2024-11-26 15:06:46 +00:00
  • 882014ff8b
    Bump docker/build-push-action from 6.9.0 to 6.10.0 dependabot[bot] 2024-11-26 14:47:39 +00:00
  • 0bcbfd48aa
    Bump coverage from 7.6.2 to 7.6.8 in /spiffworkflow-backend (#2160) dependabot[bot] 2024-11-26 14:33:24 +00:00
  • 9648857002
    Bump coverage from 7.6.2 to 7.6.8 in /spiffworkflow-backend dependabot[bot] 2024-11-26 14:13:39 +00:00
  • 174e77e3f8 Add new FAQ usama950 2024-11-26 13:50:18 +05:00
  • 4c01492bc4
    use command separated list for envs (#2157) jasquat 2024-11-25 16:57:58 -05:00
  • 6c5daba800
    fixes for scopes w/ burnettk jasquat 2024-11-25 16:54:25 -05:00
  • cafdf8bea7
    mention new variable is comman separated w/ burnettk jasquat 2024-11-25 16:38:36 -05:00
  • ecf1d5b18d
    Verify JWT Decode pixeebot[bot] 2024-11-25 21:37:07 +00:00
  • 799f23ecaf
    use command separated list for envs w/ burnettk jasquat 2024-11-25 16:32:41 -05:00
  • 4cbe586b58
    be consistent about how the redirect uri is generated. (#2153) Dan Funk 2024-11-25 13:49:13 -05:00
  • 6c4cdbead3
    Bump pytest from 8.3.2 to 8.3.3 in /spiffworkflow-backend (#2156) dependabot[bot] 2024-11-25 15:37:04 +00:00
  • 7853d872d5
    Bump pytest from 8.3.2 to 8.3.3 in /spiffworkflow-backend dependabot[bot] 2024-11-25 15:17:30 +00:00
  • 3d354f825c
    Bump bandit from 1.7.9 to 1.7.10 in /spiffworkflow-backend (#2155) dependabot[bot] 2024-11-22 14:45:37 +00:00
  • 9d04be1bfa
    Bump bandit from 1.7.9 to 1.7.10 in /spiffworkflow-backend dependabot[bot] 2024-11-22 14:25:59 +00:00
  • 8a007f917a fix pyl Dan Funk 2024-11-21 15:37:17 -05:00
  • 75075ee7d1
    Verify JWT Decode pixeebot[bot] 2024-11-21 20:27:31 +00:00
  • 018dfe1824 be consistent about how the redirect uri is generated. Dan Funk 2024-11-21 15:23:30 -05:00
  • cfd29687ee
    Bump @carbon/react from 1.44.0 to 1.71.0 in /spiffworkflow-frontend dependabot[bot] 2024-11-21 15:13:55 +00:00
  • f4ca7a115a
    Bump mypy from 1.11.2 to 1.13.0 in /spiffworkflow-backend (#2144) dependabot[bot] 2024-11-21 09:49:53 -05:00
  • ac0d3430d0
    Bump codecov/codecov-action from 5.0.2 to 5.0.7 (#2151) dependabot[bot] 2024-11-21 14:28:50 +00:00
  • 285b4cfa29
    mypy updates jasquat 2024-11-21 09:28:02 -05:00
  • f658eb0270
    Bump codecov/codecov-action from 5.0.2 to 5.0.7 dependabot[bot] 2024-11-21 14:09:07 +00:00
  • 11e5f02f85
    Bump docker/metadata-action from 5.5.1 to 5.6.1 (#2150) dependabot[bot] 2024-11-20 14:42:18 +00:00
  • 7375e8d159
    Bump docker/metadata-action from 5.5.1 to 5.6.1 dependabot[bot] 2024-11-20 14:23:21 +00:00
  • b59a8a5415
    Bump codecov/codecov-action from 5.0.1 to 5.0.2 (#2149) dependabot[bot] 2024-11-18 16:07:47 +00:00
  • e7ee3eb1a5
    Bump codecov/codecov-action from 5.0.1 to 5.0.2 dependabot[bot] 2024-11-18 15:49:07 +00:00
  • 4b19094aa5
    allow valid url combos (#2148) Kevin Burnett 2024-11-17 23:37:23 +00:00
  • 16e73bbed5
    allow valid url combos burnettk 2024-11-17 18:36:44 -05:00
  • eb20a9c7fc
    Merge remote-tracking branch 'origin/main' into mangle-docs mangle-docs burnettk 2024-11-17 18:28:30 -05:00
  • 334fd2e5eb
    Bump codecov/codecov-action from 4.6.0 to 5.0.1 (#2147) dependabot[bot] 2024-11-15 14:44:19 +00:00
  • 4e6b5a3476
    Bump codecov/codecov-action from 4.6.0 to 5.0.1 dependabot[bot] 2024-11-15 14:25:35 +00:00
  • 329c464d06
    Service Task Documentation (#2146) Usama Ahmad 2024-11-14 06:34:57 +05:00
  • f67db41eeb Service task update usama950 2024-11-13 13:26:08 +05:00