Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FE-109 migrate to Dagster 0.13 and Appsec Blessed Python 3.9 #10

Open
wants to merge 57 commits into
base: main
Choose a base branch
from

Conversation

bahill
Copy link
Collaborator

@bahill bahill commented Feb 3, 2025

Why

Relevant ticket

This PR

Checklist

  • Documentation has been updated as needed.

I'll update it all to 3.12 when I upgrade the dagster version - but first things first - just get the appsec image running old dagster
… psycopg2-binary, and pyyaml for dependency clashes
…Use temurin since adopt is now temurin, essentially
.github/workflows/build_and_publish_dev.yaml Fixed Show resolved Hide resolved
.github/workflows/validate_python.yaml Fixed Show resolved Hide resolved
# formerly known as `service_account_key`
credentials_json: '${{ secrets.GCP_TEST_KEY }}'
- name: 'Set up Cloud SDK'
uses: 'google-github-actions/[email protected]'

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'PR Validation for Main Branch' step
Uses Step
uses 'google-github-actions/setup-gcloud' with ref 'v2.0.0', not a pinned commit hash
.github/workflows/validate_python.yaml Fixed Show fixed Hide fixed
env:
GCP_TEST_KEY: '${{ secrets.GCP_TEST_KEY }}'
- name: 'Set up Cloud SDK'
uses: 'google-github-actions/[email protected]'

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Validate Python' step
Uses Step
uses 'google-github-actions/setup-gcloud' with ref 'v2.0.0', not a pinned commit hash
fetch-depth: 0
- id: 'auth'
uses: 'google-github-actions/auth@v2'

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'PR Validation for Main Branch' step
Uses Step: auth
uses 'google-github-actions/auth' with ref 'v2', not a pinned commit hash
# Needed by sonar to get the git history for the branch the PR will be merged into.
with:
fetch-depth: 0
- uses: google-github-actions/[email protected]
- id: 'auth'
uses: 'google-github-actions/auth@v2'

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Validate Python' step
Uses Step: auth
uses 'google-github-actions/auth' with ref 'v2', not a pinned commit hash
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant