Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(iatlas): import iatlas-api from GitLab with nx import #2929

Merged
merged 1,215 commits into from
Nov 27, 2024

Conversation

tschaffter
Copy link
Member

@tschaffter tschaffter commented Nov 27, 2024

Contributes to ARCH-339

Nx says to not squash merge when merging to main:

 NX   Merging these changes into main

MERGE these changes when merging these changes.
Do NOT squash these commits when merging these changes.
If you rebase, make sure to use "--rebase-merges" to preserve merge commits.
To UNDO these changes, run "git reset HEAD~1 --hard"

However, I'm going to squash merge this PR because that's how we manage our PRs to keep its git history clean. I will then evaluate the impact on accessing the git history of the imported files.

The command used to import the project:

nx import https://gitlab.com/cri-iatlas/iatlas-api.git apps/iatlas/api-gitlab

andrewelamb and others added 30 commits April 27, 2021 14:46
… to update directly with aws ecs update-service.
patch/tooling: [#176502085] Removed the aws credentials files and try to...

See merge request cri-iatlas/iatlas-api!217
patch/tooling: [#176502085] No need for the aws region in this script.

See merge request cri-iatlas/iatlas-api!218
Add paging to genes

See merge request cri-iatlas/iatlas-api!219
Add paging to features

See merge request cri-iatlas/iatlas-api!220
patch/tooling: [#176502085] Added clearer comments. Removed tools that are unneeded in the build.

See merge request cri-iatlas/iatlas-api!221
jonryser and others added 21 commits May 7, 2024 18:22
Update .gitlab-ci.yml file (commented out tests!!!!)

See merge request cri-iatlas/iatlas-api!276
fix tests

See merge request cri-iatlas/iatlas-api!277
add features to cells query

See merge request cri-iatlas/iatlas-api!278
fix paging

See merge request cri-iatlas/iatlas-api!279
fix features query using cohorts

See merge request cri-iatlas/iatlas-api!280
Master

See merge request cri-iatlas/iatlas-api!281
fix sampels test

See merge request cri-iatlas/iatlas-api!282
small change to test file to trigger workflow

See merge request cri-iatlas/iatlas-api!284
apps/iatlas/api-gitlab/requirements.txt Fixed Show fixed Hide fixed
apps/iatlas/api-gitlab/requirements.txt Fixed Show fixed Hide fixed
apps/iatlas/api-gitlab/requirements.txt Fixed Show fixed Hide fixed
apps/iatlas/api-gitlab/requirements.txt Fixed Show fixed Hide fixed
apps/iatlas/api-gitlab/requirements.txt Fixed Show fixed Hide fixed
@tschaffter tschaffter marked this pull request as ready for review November 27, 2024 19:41
@@ -0,0 +1,13 @@
ariadne==0.13.0
click==7.1.2
Flask==1.1.2

Check failure

Code scanning / Trivy

flask: Possible disclosure of permanent session cookie due to missing Vary: Cookie header High

Package: Flask
Installed Version: 1.1.2
Vulnerability CVE-2023-30861
Severity: HIGH
Fixed Version: 2.3.2, 2.2.5
Link: CVE-2023-30861
MarkupSafe==1.1.1
psycopg2-binary==2.8.5
SQLAlchemy==1.3.17
starlette==0.13.4

Check failure

Code scanning / Trivy

There MultipartParser usage in Encode's Starlette python framework bef ... High

Package: starlette
Installed Version: 0.13.4
Vulnerability CVE-2023-30798
Severity: HIGH
Fixed Version: 0.25.0
Link: CVE-2023-30798
MarkupSafe==1.1.1
psycopg2-binary==2.8.5
SQLAlchemy==1.3.17
starlette==0.13.4

Check failure

Code scanning / Trivy

starlette: Starlette Denial of service (DoS) via multipart/form-data High

Package: starlette
Installed Version: 0.13.4
Vulnerability CVE-2024-47874
Severity: HIGH
Fixed Version: 0.40.0
Link: CVE-2024-47874
SQLAlchemy==1.3.17
starlette==0.13.4
typing-extensions==3.7.4.2
Werkzeug==1.0.1

Check failure

Code scanning / Trivy

python-werkzeug: high resource usage when parsing multipart form data with many fields High

Package: Werkzeug
Installed Version: 1.0.1
Vulnerability CVE-2023-25577
Severity: HIGH
Fixed Version: 2.2.3
Link: CVE-2023-25577
SQLAlchemy==1.3.17
starlette==0.13.4
typing-extensions==3.7.4.2
Werkzeug==1.0.1

Check failure

Code scanning / Trivy

python-werkzeug: user may execute code on a developer's machine High

Package: Werkzeug
Installed Version: 1.0.1
Vulnerability CVE-2024-34069
Severity: HIGH
Fixed Version: 3.0.3
Link: CVE-2024-34069
@tschaffter tschaffter merged commit b873d15 into Sage-Bionetworks:main Nov 27, 2024
12 of 14 checks passed
@tschaffter tschaffter deleted the iatlas/import-api branch November 27, 2024 21:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants