Release/24.04 #239
Release/24.04 #239
Conversation
This reverts commit fd87f38.
* Test Job split * Added runson * Changed dependency * PSQL Tests as separate job * Fixed syntax * Split test execution and report * Split test execution and report * FIX CI * Fix CI * Extended .flake8 * Changed sed * Another sed fix * sed for flake8 * scm provider added
* add-sonar-ci: add ci file * add-sonar-ci: update ci file * add-sonar-ci: add sonar ci to assemlby * add-sonar-ci: update sonar properties --------- Co-authored-by: Jan <j.dolkowski@soldevelo.com>
* add sripts to clone.. * add branch checkout * fixing pip cmd * docker database using image * DO NOT LOAD TEST db * stop using special test db schema
The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-TWISTED-6036202
* add sripts to clone.. * add branch checkout * fixing pip cmd * docker database using image * DO NOT LOAD TEST db * stop using special test db schema
* Update ci_module.yml * Update ci_assembly.yml * Update ci_assembly.yml * Update ci_module.yml
This reverts commit 0e315cb.
Revert "Update ci_module.yml"
Added support for environment variable OPENIMIS_CONF
Adding DJANGO_DB_LOG_HANDLER and
CM-875: added command to upload opensearch dashboard configurations
|
| GitGuardian id | GitGuardian status | Secret | Commit | Filename | |
|---|---|---|---|---|---|
| 9691499 | Triggered | Generic Database Assignment | a4b6910 | .env.example | View secret |
| 9691499 | Triggered | Generic Database Assignment | 3533ef2 | .env.example | View secret |
| 3700481 | Triggered | Django Secret Key | 782eef8 | openIMIS/openIMIS/settings.py | View secret |
| 3700481 | Triggered | Django Secret Key | 487dd8e | openIMIS/openIMIS/settings.py | View secret |
| 3700481 | Triggered | Django Secret Key | 8ea0c8a | openIMIS/openIMIS/settings.py | View secret |
🛠 Guidelines to remediate hardcoded secrets
- Understand the implications of revoking this secret by investigating where it is used in your code.
- Replace and store your secrets safely. Learn here the best practices.
- Revoke and rotate these secrets.
- If possible, rewrite git history. Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.
To avoid such incidents in the future consider
- following these best practices for managing and storing secrets including API keys and other credentials
- install secret detection on pre-commit to catch secret before it leaves your machine and ease remediation.
🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| import re | ||
|
|
||
| def parse_pip(pip_str): | ||
| if "https://github.com" in pip_str: |
Check failure
Code scanning / CodeQL
Incomplete URL substring sanitization High
| print("Error name not found") | ||
|
|
||
| def parse_npm(npm_str): | ||
| if "https://github.com" in npm_str: |
Check failure
Code scanning / CodeQL
Incomplete URL substring sanitization High
| assembly_be='openimis/openimis-be_py' | ||
| #refresh openimis.json from git | ||
|
|
||
| be_config = [] |
Check notice
Code scanning / CodeQL
Unused local variable Note
| match = re.search(r'github.com/(.+).git',npm_str ) | ||
| return match.group(1) | ||
| else: | ||
| match = re.search(r'@openimis/(.+)@',npm_str ) |
Check notice
Code scanning / CodeQL
Unused local variable Note
| DEFAULT_DB_LOGGING_HANDLER = os.getenv("DJANGO_DB_LOG_HANDLER", "db-queries") | ||
| LOGGING_LEVEL = os.getenv("DJANGO_LOG_LEVEL", "DEBUG" if DEBUG else "WARNING") | ||
| if DEBUG: | ||
| EMAIL_BACKEND = 'django.core.mail.backends.console.EmailBackend' |
Check warning
Code scanning / CodeQL
Variable defined multiple times Warning
| @@ -1,3 +1,5 @@ | |||
| from channels.auth import AuthMiddlewareStack | |||
| import dashboard_etl.routing | |||
Check notice
Code scanning / CodeQL
Unused import Note
| @@ -0,0 +1,33 @@ | |||
| import os | |||
| from git import Repo | |||
| from config import GITHUB_TOKEN, USER_NAME, BRANCH | |||
Check notice
Code scanning / CodeQL
Unused import Note
| @@ -0,0 +1,51 @@ | |||
| from config import GITHUB_TOKEN, USER_NAME, BRANCH | |||
Check notice
Code scanning / CodeQL
Unused import Note
| @@ -0,0 +1,51 @@ | |||
| from config import GITHUB_TOKEN, USER_NAME, BRANCH | |||
| from utils import parse_pip, walk_config_be | |||
Check notice
Code scanning / CodeQL
Unused import Note
| from django.core.management.base import BaseCommand | ||
| from pathlib import Path | ||
|
|
||
| from openIMIS.openimisapps import openimis_apps |
Check notice
Code scanning / CodeQL
Unused import Note
|
No description provided.