Aws2 - #68
Closed
HamzaAburaneh wants to merge 152 commits into
Closed
Conversation
feat: create ECR module
feat: add hosted zone
feat: add ssm module
feat: create iam module
feat: add required files for lb module
feat: add ECS module for feedback-viewer application
Feat/refactor shared infrastructure
Fix/badwords logger import
- Add missing org.slf4j.Logger import to BadWordController and ProblemCacheService - Override assertj-core to 3.27.3 (fixes High XXE vulnerability) - Override commons-lang3 to 3.17.0 (fixes Moderate Uncontrolled Recursion) - Override logback to 1.5.16 (fixes Low class instantiation vulnerability)
- Bump logback to 1.5.18 (fixes both GHSA-25qh-j22f-pwp8 and GHSA-qqpg-mvqg-649v) - Allow GHSA-rqfh-9r24-8c9r for assertj (no patched version available, test-scoped only) - Upgrade dependency-review-action to v4 and checkout to v4
…vulnerabilities fix: add missing Logger imports and patch dependency vulnerabilities
- assertj-core → 3.27.7 (fixes GHSA-rqfh-9r24-8c9r, XXE) - commons-lang3 → 3.18.0 (fixes uncontrolled recursion) - logback → 1.5.25 (fixes GHSA-25qh-j22f-pwp8 ACE + GHSA-qqpg-mvqg-649v class instantiation) - Fix ReportController: replace javax.swing.text.View with RedirectView - Upgrade dependency-review-action to v4
…vulnerabilities fix: patch all dependency vulnerabilities and fix ReportController
feat: extend hacker one pilot till march 29th
fix: bump jackson-core and tomcat-embed-core for security
fix: remove unused python scripts and reports feature
…rough an error message Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Potential fix for code scanning alert no. 10: Information exposure through an error message
fix: remove unused email service and notification dependency
…ealth check failures - Add 'gcIpCache' to CacheManager so @Cacheable on GcIpValidationService works correctly - Add 5s connect/read timeout to RestTemplate to prevent hung RDAP calls from blocking Tomcat threads and causing ELB health check failures Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
fix: register gcIpCache and add RDAP timeout to prevent ECS exits
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
fix: add updated IP to GC IP whitelist
- Allow /health and /actuator/health through Spring Security so ELB health checks return 200 instead of being redirected to /login (302) - Import AWS DocumentDB certs into the JVM default cacerts instead of creating a separate truststore, preserving standard public CAs needed for outbound HTTPS calls (e.g. RDAP IP validation) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
fix: resolve ELB health check failures and RDAP SSL errors
The app takes ~25s to start. Without a container health check, ECS marks the container healthy immediately (PID 1 running) and ELB begins counting health check failures during startup. After 2 failures the task is killed. Adding a container-level health check with startPeriod=60 ensures ECS waits for the app to be genuinely ready before registering it with the target group, so ELB health checks only begin after /health returns 200. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
The /health endpoint was returning 404 because the actuator jar was never included in the build. All the management.* config and ECS env vars were already correct - just the dependency was missing. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Fix/ecs health check and rdap ssl
The HackerOne pilot has ended. Remove the aws_alb_listener_rule that served /.well-known/security.txt as a fixed response from the ALB.
chore: remove HackerOne security.txt ALB listener rule
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.