Commit Graph

53 Commits

Author SHA1 Message Date
Gerard Olenski
fb45a3e3c2 ACS-9113 Verify Supported Platform for 25.1 (#3142)
- updated test suites to verify support of MariaDB 10.11
2025-01-14 10:07:23 +01:00
Gerard Olenski
986c387412 ACS-9113 [db] Verify Supported Platform for 25.1 (#3134)
- updated CI to run tests on PostgreSQL 14.x, 15.x, 16.x
2025-01-13 10:13:26 +01:00
Sara
4eafb13ba6 ACS-9044 Remove excluded files from war file for SAST (#3084)
* ACS-9044 Bump dependency.spring.version from 6.1.14 to 6.2.0

* ACS-9044 Bump spring-security to 6.4.1

* ACS-9044 Add file to hold excluded files list

* ACS-9044 POC - script to remove excluded files from alfresco.war

* ACS-9044 POC - change veracode SAST to scan reduced alfresco.war

* ACS-9044 POC - create reduced alfresco.war before SAST

* ACS-9044 POC - keep reduced alfresco.war in target dir

* ACS-9044 Use temporary directory and allow any war file

* ACS-9044 fix failing path

* ACS-9044 update from review

* ACS-9044 fix for temp dir

* ACS-9044 fix for temp dir

* ACS-9044 Revert spring and spring-security versions
2024-12-20 10:21:33 +00:00
dependabot[bot]
a5f01e0d94 Bump Alfresco/alfresco-build-tools from 7.1.0 to 8.2.0 (#3018) 2024-11-22 12:39:02 +00:00
mikolajbrzezinski
b2c87aa22d ACS-8867 Add time-out to "Set up the environment" steps (#2955)
* ACS-8867 Add time-out to set up steps
2024-10-03 12:05:59 +02:00
dependabot[bot]
93d4e603ed Bump Alfresco/alfresco-build-tools from 6.1.0 to 7.1.0 (#2952)
Bumps [Alfresco/alfresco-build-tools](https://github.com/alfresco/alfresco-build-tools) from 6.1.0 to 7.1.0.
- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)
- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/v6.1.0...v7.1.0)

---
updated-dependencies:
- dependency-name: Alfresco/alfresco-build-tools
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-01 15:08:49 +02:00
dependabot[bot]
a5f8e80bcc Bump Alfresco/ya-pmd-scan from 4.0.0 to 4.1.0
Bumps [Alfresco/ya-pmd-scan](https://github.com/alfresco/ya-pmd-scan) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/alfresco/ya-pmd-scan/releases)
- [Commits](https://github.com/alfresco/ya-pmd-scan/compare/v4.0.0...v4.1.0)

---
updated-dependencies:
- dependency-name: Alfresco/ya-pmd-scan
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-01 00:20:33 +00:00
Tom Page
0b511e0b55 Unify checkout action. 2024-09-25 11:33:31 +01:00
Tom Page
b00e11cb6f Add precommit for secret scanning, formatting and license header checking. (#2938)
* Add precommit for secret scanning, formatting and license header checking.

* Turn off bash debug logging.

* Skip precommit checks that apply to all files.

There are too many violations to run against all files.
2024-09-25 10:35:39 +01:00
Aleksandra Onych
4cf2e76430 ACS-8670 Deal with upcoming GitHub Actions deprecations (#2870)
Co-authored-by: Domenico Sibilio <domenicosibilio@gmail.com>
2024-09-03 12:34:31 +02:00
Tom Page
1a7027327e [skip tests] PRODENG-291 Upgrade ya-pmd-scan. 2024-07-23 12:17:46 +01:00
Wojtek Świętoń
2ccdee122a ACS-8394 ReportPortal Integration run only on master, as an optional step 2024-07-15 10:22:29 +02:00
dependabot[bot]
34357a83d8 Bump Alfresco/ya-pmd-scan from 3.0.0 to 3.0.2 (#2631)
Bumps [Alfresco/ya-pmd-scan](https://github.com/alfresco/ya-pmd-scan) from 3.0.0 to 3.0.2.
- [Release notes](https://github.com/alfresco/ya-pmd-scan/releases)
- [Commits](https://github.com/alfresco/ya-pmd-scan/compare/v3.0.0...v3.0.2)

---
updated-dependencies:
- dependency-name: Alfresco/ya-pmd-scan
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-10 16:16:14 +02:00
mikolajbrzezinski
b73b8df892 ACS-6931 Re-enable Veracode SAST Scan (#2690)
ACS-6931 Re-enable Veracode SAST Scan
2024-06-19 11:51:40 +02:00
Damian Ujma
f8becd3523 ACS-6309 Fix AGS Integration Tests (PostgreSQL) (#2643) 2024-05-14 16:19:01 +02:00
dependabot[bot]
5e43f3d4ab Bump actions/checkout from 3 to 4
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-08 16:14:50 +00:00
Tom Page
3c7593265d Add GHA to Dependabot scanning. 2024-05-08 14:52:01 +01:00
Piotr Żurek
2bec2bd1c4 ACS-7467 Migrate to Docker Compose V2 (#2560) 2024-04-03 15:08:10 +02:00
Wojtek Świętoń
2723817832 ACS-6309 Integration with Report Portal (#2445) 2024-04-03 09:46:01 +02:00
mikolajbrzezinski
7d135b9356 ACS-6931 Temporarily turn off SAST Scan (#2489)
ACS-6931 Temporarily turn off SAST Scan
2024-03-06 13:11:31 +01:00
Damian Ujma
c4714b19eb ACS-6601 Implement Repository OIDC Compliance (#2447)
* ACS-6677 Enhance OIDC Configuration Flexibility (#2426)

* ACS-6603 Implement OIDC Compliance (#2442)

* ACS-6677 Enhance OIDC Configuration Flexibility

* ACS-6677 Revert changing http header

* ACS-6677 Add unit test to suite

* ACS-6677 Rename var

* ACS-6677 Fix PMD issues

* ACS-6677 Fix PMD issues

* ACS-6677 Improve code

* ACS-6677 Fix compatibility

* ACS-6677 Add JwtAudienceValidator

* ACS-6677 Change domain

* ACS-6603 Oidc compliance

* ACS-6603 Add Auth0 test

* ACS-6603 Reformat

* ACS-6603 Enable User Info Endpoint test + Refactor

* ACS-6603 Change test condition

* ACS-6603 Add state parameter + reformat stream

* ACS-6603 Use enum type
2024-02-13 18:43:44 +01:00
Domenico Sibilio
0cea265153 ACS-6650 Avoid running SAST scan on DependaBot PRs (#2418)
Skipping SAST scan on DependaBot PRs as it won't provide any additional insights and requires sharing more secrets with DependaBot than we're willing to.
2024-01-25 12:08:04 +01:00
Domenico Sibilio
9cce8d54d8 ACS-5925 Switch from IDS 2.0.0 to Keycloak 21.1.2 (#2369) 2023-12-13 12:48:47 +01:00
mikolajbrzezinski
eff41eef12 ACS-6304 Implement SAST Pipeline Scan (#2304)
ACS-6304 Implement SAST Pipeline Scan
2023-12-13 10:57:43 +01:00
Damian Ujma
a660109b73 ACS-6303 Add seamless ACS JIT user provisioning (#2336)
* ACS-6303 Implement JIT User Provisioning

* ACS-6303 Fix AuthenticationsTest

* ACS-6303 Add IT test

* ACS-6303 Fix syntax

* ACS-6303 Revert local change

* ACS-6303 Update IDS version

* ACS-6303 Fix JITProvisioning IT test execution

* ACS-6303 Add new IT scenario

* ACS-6303 Remove AppContext05TestSuite-setup.sh + optimize calling UserInfoEndpoint

* ACS-6303 Fix PMD issues

* ACS-6303 Fix property name

* ACS-6303 Change getUserInfo return type

* Apply suggestions from code review

Co-authored-by: Domenico Sibilio <domenicosibilio@gmail.com>

* ACS-6303 Move var declaration + use lambda+diamond operator

* ACS-6303 Add a small optimisation

---------

Co-authored-by: Domenico Sibilio <domenicosibilio@gmail.com>
2023-11-30 12:50:24 +01:00
Tom Page
63ef313ad5 ACS-5993 Add classpath support to PMD. (#2301) 2023-11-17 11:42:33 +00:00
Domenico Sibilio
f7a4da0ba5 Free up GHA runner disk space [db] (#2249) 2023-10-13 13:28:07 +02:00
Piotr Żurek
fb78a5fe41 ACS-6103 Upgrade PostgreSQL version (#2233) 2023-10-09 13:01:35 +02:00
Tom Page
e0a1defb80 Update ya-pmd-scan to 2.0.5. 2023-09-28 10:32:34 +01:00
Paweł Rainer
67b5c9bc70 Bump pmd scan job version (#2204) 2023-09-22 11:55:47 +01:00
Tom Page
e070354764 PRODENG-222 Fail builds based on PMD scan. (#2196) 2023-09-18 18:14:17 +01:00
Sara
2f77cdd94f Feature/acs 5905 remove dependabot spring overrides (#2165)
* ACS-5905 Remove spring related dependabot overrides

* ACS-5905 Remove or update outdated dependabot overrides

* ACS-5905 Remove outdated tas dependabot overrides
2023-08-31 10:22:27 +01:00
Tom Page
36d09c230e PRODENG-222 Update to PMD 7. (#2111) 2023-08-03 15:46:32 +01:00
Tom Page
0b6b405c5f ACS-5698 Allow specifying version when performing force release. (#2089) 2023-07-26 15:51:12 +01:00
Tom Page
fea4f7f901 PRODENG-222 Try new location for PMD scan. (#2068) 2023-07-13 15:52:43 +01:00
Tom Page
8af5c38caa PRODENG-222 Upgrade PMD action to include report summary. (#2063) 2023-07-12 10:12:05 +01:00
Marcin Strankowski
18dadfe110 Test org.codehaus.cargo plugin as a replacement (#1965)
* Move from tomcat7-maven-plugin to cargo-maven3-plugin, add a test for api-explorer deployment
2023-07-03 11:07:29 +02:00
Tom Page
aea504f911 PRODENG-222 Add PMD to annotate pull requests. 2023-06-28 07:52:37 +01:00
Kacper Magdziarz
7e9e0e1ad4 [ACS-5005] Improve keystore/truststore generation for GHA (#1873) 2023-04-14 16:12:33 +02:00
Piotr Żurek
73ae0d0a6e ACS-4847 Remove Keycloak dependencies (#1848) 2023-03-31 15:28:14 +02:00
Kacper Magdziarz
fab591eb9b [ACS-4459] Investigate and extend/universalize current custom Solr mTLS implementation in Repository (#1735)
* ACS-4459 Add new HttpClient Factory for Mutual TLS and implement it for Transform Service
* ACS-4462 Add e2e for MTLS
2023-03-30 13:43:42 +02:00
Damian Ujma
90de678d7d ACS-3750 Fix cancelled workflow condition (#1768) 2023-02-23 16:11:09 +01:00
Domenico Sibilio
c9522f299e ACS-3750 Use set Git token instead of cached one (#1736) 2023-02-07 16:20:18 +01:00
Domenico Sibilio
b28e02c6fa ACS-3750 Improve branch detection in if conditions (#1722) 2023-02-02 17:16:06 +01:00
Domenico Sibilio
34c8f9e431 ACS-4455 Bump alfresco-build-tools to v1.33.0 (#1713) 2023-01-31 14:57:10 +01:00
Domenico Sibilio
8951bfa4da ACS-3750 Bump alfresco-build-tools to v1.32.0 (#1702) 2023-01-25 12:22:00 +01:00
Tom Page
d7edaa5eaf ACS-4464 Always build application when build or prepare are called.
If build is called then we definitely should be building the application. When prepare is called then we want to
prevent further builds running if the application doesn't compile.
2023-01-24 10:57:37 +00:00
Damian Ujma
868d783746 ACS-3841 Migrate to GHA (#1631)
* ACS-3841 Use configure-git-author, rename steps, remove always from maven cache clean step

* ACS-3841 Fix PostgreSQL 13.7 tests step name

* ACS-3841 Fix update_downstream job

* ACS-3841 Set global option for configure-git-author action

* ACS-3841 Update license header

* ACS-3841 Update configure-git-author version + improve uploading artifacts

* ACS-3841 Improve uploading artifacts

* ACS-3841 Fix uploading artifacts

* ACS-3841 Rename jobs names + revert removed functions

* ACS-3841 Fix step condition

* ACS-3841 Update to latest alfresco-build-tools

Co-authored-by: mikolajbrzezinski <mikolaj.brzezinski@hyland.com>
2023-01-10 15:50:11 +01:00
Sara
ecb0d9a329 Feature/acs 3122 update tomcat to rocky linux8 (#1258)
* update tomcat base image to rockylinux8

* add dockerfile to dependabot

* update packages for rockylinux8

* fix time zone double quotes

* correct dependabot indents

* correct dependabot indents

* corrected nbr pull requests
2022-07-28 15:02:39 +01:00
Sara
3d35eed39c Feature/acs 3122 update tomcat to rocky linux8 (#1255)
* update tomcat base image to rockylinux8

* add dockerfile to dependabot

* update packages for rockylinux8
2022-07-28 12:15:00 +01:00