quickstart-openshift

quickstart-openshift copied to clipboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/bcgov/quickstart-openshift). ## Awaiting Schedule The following updates are...

renovate[bot]

- Site: [https://quickstart-openshift-test-backend.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-test-backend.apps.silver.devops.gov.bc.ca) **New Alerts** - **Content Security Policy (CSP) Header Not Set** [10038] total: 4: - [https://quickstart-openshift-test-backend.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-test-backend.apps.silver.devops.gov.bc.ca) - [https://quickstart-openshift-test-backend.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-test-backend.apps.silver.devops.gov.bc.ca/) - [https://quickstart-openshift-test-backend.apps.silver.devops.gov.bc.ca/robots.txt](https://quickstart-openshift-test-backend.apps.silver.devops.gov.bc.ca/robots.txt) - [https://quickstart-openshift-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://quickstart-openshift-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml) - **Permissions Policy Header Not Set**...

github-actions[bot]

ZAP: frontend

6

- Site: [https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca) **New Alerts** - **CSP: Wildcard Directive** [10055] total: 3: - [https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/) - [https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt) - [https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml) - **CSP: script-src unsafe-eval** [10055] total: 3: - [https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/) - [https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://quickstart-openshift-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt) -...

github-actions[bot]

We've switched from branch protection rules to rulesets, which are much more capable. Update the docs to reflect this.

DerekRoberts

DerekRoberts

Looks like MacOS hates ${CAPS^}, so we'll need an alternative. (Also, fix the script name in the usage example.) https://github.com/bcgov/quickstart-openshift-helpers/blob/main/cert-setup/csr_generator.sh#L30

DerekRoberts

https://github.blog/2024-05-02-introducing-artifact-attestations-now-in-public-beta/

DerekRoberts

Support Node.js version 22

5

Node.js 22 is released as current, lets start exploring to migrate workloads to 22 and see what impacts we are seeing.

mishraomp

Should probably go into the .pr-validate.yml shared job.

DerekRoberts

Abstract resources to values.yml

2

currently resources are hardcoded in templates, which makes it difficult to set for environment-specific needs. Read from values.yml which can help in providing different resources for different env. PR or...

mishraomp