Ed Morley
Ed Morley
@pradyunsg Totally understand, no worries! I don't suppose we could merge this separate typo fix PR in the meantime (so I can then rebase this PR on top of main...
I've rebased on `main` after the recent PR merges.
I've rebased this on `main` after the recent merge.
I don't suppose someone has a moment to review? :-)
Rebased again. Could someone review? :-) (This PR has been open for 6 months)
I ended up using the Go `cosign` CLI via its GHCR registry OCI image (with the SHA256 digest, that Dependabot should be able to bump 🤞) for our builds fwiw:...
Notes: - `FORWARDED_ALLOW_IPS` is used by both gunicorn and uvicorn. Setting it to `*` is environment-specific (since it requires knowing there is a LB/proxy that's correctly setting headers), and forgetting...
> * So I think we should drop this for the CNB, and update the Python getting started guide's `gunicorn.conf.py` to demonstrate enabling access logs (and for bonus points, how...
> We could always advocate for Poetry supporting an "--type app" (or similar) for `poetry init` which picks defaults more appropriate for an app vs a library (in addition to...
Presuming we pick option (4), then the `tool.poetry.dependencies.python` specifiers we'll support will be: - `3.12.*` - `3.12.5` - `==3.12.*` - `==3.12.5` We would then reject anything else with an error...