-
Notifications
You must be signed in to change notification settings - Fork 2
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update image configuration and fix CSV processing #94
Conversation
These represent the current versions available for Alpine Linux 3.18. The tag for the `python` Docker image was also updated to reflect the change in system Python version being installed.
The Pipfile should have the same Python version as that specified in the Dockerfile. Dependencies were updated with `pipenv lock` as well.
Bump pip from 23.1.2 to 24.0 Bump pipenv from 2023.10.20 to 2023.12.1 Bump setuptools from 67.7.2 to 69.2.0 Bump wheel from 0.40.0 to 0.43.0
In cisagov/dotgov-data#114 the headers for the `current-federal.csv` file were changed. This updates the script used in this Docker configuration to use the updated header field values.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍 👍
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why not upgrade to Alpine 3.19 while we're here?
I'd rather keep this as "necessary changes for the PR's purpose" as possible in line with our bullet regarding scope creep. |
🗣 Description
This pull request does the following:
Dockerfile
.Dockerfile
.Pipfile
to reflect changes in Python version.Pipfile
to update any dependencies inPipfile.lock
.vdp_scanner.py
script to account for CSV header format changes.💭 Motivation and context
The Alpine Linux package changes are required for the image to build successfully and since I would need to re-lock the
Pipfile
after updating it to match Python versions used in theDockerfile
it made since to update all of the dependencies. There were some capitalization changes incurrent-federal.csv
that breakvdp_scanner.py
so that needed to be fixed.🧪 Testing
Automated tests pass. The image builds successfully. I used this branch's image in production to process this week's domain scan reports.
✅ Pre-approval checklist
✅ Post-merge checklist