-
Notifications
You must be signed in to change notification settings - Fork 39
Core mis #340
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: develop
Are you sure you want to change the base?
Conversation
Added missing core-mis modules
Fix - removed redundant comma to fix CI.
* CM-147: update openimis.json * CM-146: move tasks_management
Added missing core-mis modules
Fix - removed redundant comma to fix CI.
* CM-147: update openimis.json * CM-146: move tasks_management
* ONI-62: Add Nepali calendar dependency. (#163) * Activate policy renewal task (#159) * Rename pgsql to pgsql.yml (#136) * OP-1512 Specified version of apscheduler (#167) --------- Co-authored-by: wzglinieckisoldevelo <[email protected]> Co-authored-by: Dragos DOBRE <[email protected]> Co-authored-by: Patrick Delcroix <[email protected]>
* CM-269: added for coreMIS opensearch dsl library and configuration * CM-269: changed opensearch DSL env * CM-269: fixed typo
* CM-269: added for coreMIS opensearch dsl library and configuration * CM-269: changed opensearch DSL env * CM-269: fixed typo * CM-269: added openSearch information how to deploy and configure * CM-269: fixed readme section regarding opensearch * CM-269: fixed link to opensearch module * CM-269: fixed more details about opensearch section * CM-269: fixed more details about opensearch section * CM-269: fixed more details about opensearch section
* CM-269: added for coreMIS opensearch dsl library and configuration * CM-269: changed opensearch DSL env * CM-269: fixed typo * CM-269: added openSearch information how to deploy and configure * CM-269: fixed readme section regarding opensearch * CM-269: fixed link to opensearch module * CM-269: fixed more details about opensearch section * CM-269: fixed more details about opensearch section * CM-269: fixed more details about opensearch section * CM-269: fixed http_auth
Co-authored-by: Jan <[email protected]>
* change-individual-branch: change to develop * Revert "change-individual-branch: change to develop" This reverts commit 85769ed. --------- Co-authored-by: Jan <[email protected]>
* change-individual-branch: change to develop * Revert "change-individual-branch: change to develop" This reverts commit 85769ed. --------- Co-authored-by: Jan <[email protected]>
Co-authored-by: Jan <[email protected]>
OM-503 Added global storage
Co-authored-by: Jan <[email protected]>
Co-authored-by: Jan <[email protected]>
* CQI-146: config for password policy * CQI-146: axes config
…kout mechanism (#259) * CQI: security fixes for password, headers, rate limiter, csrf and lockout mechanism * Resovled issue with missing modules - error handling
FHIR and DHIS are both healthcare specific modules
Remove modules unneeded for a basic social protection MIS setup
As the dev database
STATICFILES_STORAGE/STORAGES are mutually exclusive.
Update CoreMIS branch to track changes in develop branch
For switching off OpenSearch in Django tests
Flag if the current env is unit testing
hotfix: fixed cache issue
OSB-12: added command to load fixture with unknown foreign key
|
GitGuardian id | GitGuardian status | Secret | Commit | Filename | |
---|---|---|---|---|---|
3700466 | Triggered | Generic Password | 9891cc9 | .idea/runConfigurations/Run_Migrations_.xml | View secret |
🛠 Guidelines to remediate hardcoded secrets
- Understand the implications of revoking this secret by investigating where it is used in your code.
- Replace and store your secret safely. Learn here the best practices.
- Revoke and rotate this secret.
- If possible, rewrite git history. Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.
To avoid such incidents in the future consider
- following these best practices for managing and storing secrets including API keys and other credentials
- install secret detection on pre-commit to catch secret before it leaves your machine and ease remediation.
🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.
@@ -0,0 +1,100 @@ | |||
from django.core.management.base import BaseCommand |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@sniedzielski is this also in develop ?
@@ -21,9 +24,16 @@ def dispatcher(exc, context): | |||
return response | |||
|
|||
|
|||
def _process_exception_handler(exc, context): |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@sniedzielski what is is used for ?
PASSWORD_MIN_LENGTH = int(os.getenv('PASSWORD_MIN_LENGTH', 8)) | ||
PASSWORD_UPPERCASE = int(os.getenv('PASSWORD_UPPERCASE', 1)) | ||
PASSWORD_LOWERCASE = int(os.getenv('PASSWORD_LOWERCASE', 1)) | ||
PASSWORD_DIGITS = int(os.getenv('PASSWORD_DIGITS', 1)) | ||
PASSWORD_SYMBOLS = int(os.getenv('PASSWORD_SYMBOLS', 1)) | ||
|
||
IS_UNIT_TEST_ENV = 'test' in sys.argv |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@sniedzielski this is used for opensearch SYNC but it should not be used like that there is a opensearch config for that
|
||
USER_AGENT_CSRF_BYPASS = [] | ||
|
||
CSP_DEFAULT_SRC = ["'self'"] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
not sure we have CSP config TBC
No description provided.