uc-cdis / fence

75%

master: 75%

LAST BUILD ON BRANCH 12.0.1

branch: 12.0.1

CHANGE BRANCH

x

Reset

• 12.0.1
• 10.0.0
• 10.0.0.0
• 10.1.0
• 10.2.0
• 10.3.0
• 10.3.1
• 10.4.0
• 10.4.1
• 10.4.2
• 11.0.0
• 11.0.1
• 11.0.2
• 11.1.0
• 11.2.0
• 11.2.1
• 11.2.2
• 11.3.0
• 11.3.2
• 11.4.0
• 11.4.1
• 12.0.0
• 12.1.0
• 2.7.4
• 2020.02
• 2020.03
• 2020.04
• 2020.05
• 2020.06
• 2020.07
• 2020.08
• 2020.09
• 2020.10
• 2020.11
• 2020.12
• 2021.01
• 2021.02
• 2021.03
• 2021.04
• 2021.05
• 2021.06
• 2021.07
• 2021.08
• 2021.09
• 2021.10
• 2021.11
• 2021.12
• 2022.01
• 2022.02
• 2022.03
• 2022.04
• 2022.07
• 2022.08
• 2022.10
• 2022.11
• 2022.12
• 2023.01
• 2023.02
• 2023.03
• 2023.03.01
• 2023.04
• 2023.05
• 2024.09
• 2024.10
• 2024.11
• 2024.12
• 2025.01
• 2025.02
• 2025.03
• 2025.04
• 2025.05
• 2025.06
• 2025.07
• 2025.08
• 2025.09
• 2025.10
• 3.2.1.4
• 4.1.1
• 4.10.0
• 4.11.0
• 4.12.0
• 4.13.0
• 4.13.1
• 4.13.2
• 4.13.4
• 4.14.0
• 4.15.0
• 4.15.1
• 4.15.2
• 4.16
• 4.17.0
• 4.18.0
• 4.19.0
• 4.2.0
• 4.2.1
• 4.20.0
• 4.20.1
• 4.21.0
• 4.22.0
• 4.22.1
• 4.22.2
• 4.22.3
• 4.22.4
• 4.23.0
• 4.23.1
• 4.23.2
• 4.23.3
• 4.23.4
• 4.23.5
• 4.23.6
• 4.23.7
• 4.24.0
• 4.25.0
• 4.26.0
• 4.26.1
• 4.27.0
• 4.27.1
• 4.28.0
• 4.28.1
• 4.28.2
• 4.29.0
• 4.29.1
• 4.4.1
• 4.4.2
• 4.5.0
• 4.6.0
• 4.6.1
• 4.6.2
• 4.7.0
• 4.8.0
• 4.9.0
• 4.9.1
• 4.9.2
• 5.0.0
• 5.1.0
• 5.2.0
• 5.2.1
• 5.3.0
• 5.3.1
• 5.3.2
• 5.3.3
• 5.4.1
• 5.5.0
• 5.5.1
• 5.5.2
• 5.5.4
• 5.5.5
• 5.6.0
• 6.0.0
• 6.0.1
• 6.1.0
• 6.1.1
• 7.0.0
• 7.1.0
• 7.2.0
• 7.3.0
• 7.3.1
• 8.0.0
• 8.0.1
• 9.0.0
• 9.1.0
• 9.1.1
• 9.3.6
• Chore_CI_refactor
• DO-NOT-MERGE/immport
• EliseCastle23-patch-1
• Python_3.9_Upgrade
• add-debug-log
• add_gh_action_integration_tests
• ao-bump-cryptography
• ao-bump-jinja2
• ao-powered-edit-register-html
• assume-role-cache
• automatedCopy-azure-storage-support
• automatedCopy-example-azure-devops-pipeline
• automatedCopy-feat/cilogon
• automatedCopy-feat/okta-client
• automatedCopy-feat/s3-delete-files
• automatedCopy-feature/oidc-oauth-groups
• automatedCopy-feature/oidc-oauth-groups-rev2
• automatedCopy-fix/update_last_auth
• broken-links
• change_print_to_logger
• chore/2023.03.01
• chore/PPS-301
• chore/add-authz-column-in-master
• chore/add-authz-column-to-project-table
• chore/add-client-id
• chore/add-ga4gh-scope-description
• chore/add-logging-for-discovery
• chore/add_userid_support
• chore/adopt_base_img_pybase3-1.4.0
• chore/adopt_new_base_img_with_dd_apm
• chore/adopt_new_pybase_img
• chore/app
• chore/baseimage
• chore/bump
• chore/bump-cryptography-and-pyyaml
• chore/ccrypt_usersync
• chore/chore/set_rate_limit_for_fence2
• chore/cirrus
• chore/codecoverage
• chore/config
• chore/dbgap_backup
• chore/debug_presigned_url
• chore/decrease-uwsgi-timeouts
• chore/default_whitelist
• chore/demo_whatever
• chore/dep
• chore/dep_test
• chore/dependabot
• chore/deps
• chore/deps-2
• chore/deps-plus
• chore/disable_github_actions_for_external_contributions
• chore/docs
• chore/error-msg
• chore/expire-arborist-policies
• chore/feature_flag_for_prometheus_metrics
• chore/fence-create-doc-update
• chore/fence_img_with_newrelic_poc_changes
• chore/filename
• chore/fix-typo
• chore/fix-usersync-expiration
• chore/fix-usersync-expiration-removal
• chore/fix_defaultconfig
• chore/fix_improper_certificate_validation_pps_1936
• chore/flask-vulnerability
• chore/google-docs
• chore/hooks
• chore/hooks2
• chore/increase-uwsgi-timeouts
• chore/install_vim_docker
• chore/introduce_prometheus_counter_for_presigned_urls
• chore/jenkins_prebuilt
• chore/just_python_upgrade
• chore/label_prs_with_relevant_tests
• chore/log-google-proxy-email-with-current-groups
• chore/log-txn
• chore/logging
• chore/login
• chore/logo
• chore/logout
• chore/logs
• chore/making_fence_monitorable
• chore/metrics
• chore/metrics-cleanup
• chore/migrate-wool
• chore/mockserver
• chore/multpart-init-change
• chore/new_parent_img_pybase3-1.4.2
• chore/niaiddata
• chore/openapis
• chore/passport_docs
• chore/populate-iss-sub-pair-to-user-mapping-table
• chore/prefix-DRS-policies
• chore/py3fix
• chore/python3
• chore/python_version
• chore/ras_authz_field_login
• chore/ras_logout
• chore/ras_test
• chore/rbac
• chore/refactor-tests
• chore/remove_concurrency
• chore/remove_fallback
• chore/remove_jenkins_references
• chore/revert
• chore/sec
• chore/security
• chore/sem_ver_release
• chore/set_rate_limit_for_fence
• chore/skip-quay-build-all-PRs
• chore/status
• chore/switch_helm_ci_pipeline
• chore/synapse
• chore/sync-logs
• chore/tag-500
• chore/test-binam
• chore/test_custom_cdis_jenkins_lib_code
• chore/test_new_cirrus
• chore/test_new_gen3authz
• chore/test_new_parent_img
• chore/test_poetry_dependency_mgmt
• chore/testing_master_branch
• chore/track-x-headers
• chore/track_cache_hit_and_cache_miss
• chore/tweak_fence_create_manage_google_keys
• chore/up_version_for_migration_fix
• chore/update-baseline
• chore/update-deps
• chore/update-deps-test
• chore/update-passport-logging
• chore/update-swagger
• chore/update_base_img
• chore/update_packages
• chore/update_pybase_img_denovo
• chore/update_sign_url
• chore/update_toml
• chore/upgrade-crryptography-42.0.5
• chore/usync-logs
• chore/verbose
• chore/version
• chore_dockerfilechng
• clarify-MAX_ACCESS_TOKEN_TTL
• command_line_validation
• copy-feat/alternate-data_upload_bucket
• debug-ras-userinfo
• debug-test
• debug/immport
• debug/pauline
• debug_visas
• dependabot/pip/addict-2.2.1
• dependabot/pip/authlib-0.12.1
• dependabot/pip/certifi-2024.7.4
• dependabot/pip/cryptography-39.0.1
• dependabot/pip/cryptography-43.0.1
• dependabot/pip/flask-3.1.1
• dependabot/pip/flask-cors-5.0.0
• dependabot/pip/flask-cors-6.0.0
• dependabot/pip/h11-0.16.0
• dependabot/pip/httplib2-0.18.0
• dependabot/pip/idna-3.7
• dependabot/pip/jinja2-3.1.5
• dependabot/pip/jinja2-3.1.6
• dependabot/pip/oauth2client-gte-2.0.0-and-lt-5.0
• dependabot/pip/paramiko-2.10.1
• dependabot/pip/protobuf-5.29.5
• dependabot/pip/pytest-5.2.1
• dependabot/pip/python-jose-3.4.0
• dependabot/pip/requests-2.32.4
• dependabot/pip/setuptools-78.1.1
• dependabot/pip/urllib3-1.26.19
• dependabot/pip/werkzeug-3.0.6
• dependabotfix
• dev/include-ras-access-token-in-session
• dev/include-ras-passport-in-session
• dev/include-ras-userinfo-in-userinfo
• dev/print-ras-passport
• doc/public
• doc/usersync
• doc/useryaml
• docs/alembic
• docs/client_creds
• docs/idp
• docs/local-multi
• docs/openapi
• docs/shib
• docs/update_param
• dummy-pr
• feat/DCF-1446-mfa-arborist-policy-assignment
• feat/ENABLE_VISA_UPDATE_CRON
• feat/GPE-1121
• feat/GPE-1121-dockerslim
• feat/GPE-795
• feat/PD-14
• feat/PXP-10776-parent-child-study-authz
• feat/PXP-11366-add-visa-to-ga4gh
• feat/PXP-11366-remove-ga4gh_passport_v1-from-userinfo
• feat/VADC-845
• feat/add-passports-to-openapi
• feat/addDataUseAgreement
• feat/add_admin_actions_audit_entry
• feat/add_extra_fields_to_admin_user_post
• feat/add_idp_table
• feat/add_new_idp_table
• feat/add_ras_validation_endpt
• feat/add_support_for_soft_delete_user
• feat/al2
• feat/al2_old_dockerfile
• feat/alembic
• feat/api-key-scope
• feat/arborist-dbgap
• feat/arborist-url
• feat/at-hash
• feat/atlas-hacks
• feat/audit
• feat/audit-creds
• feat/audit-sqs
• feat/auth-mapping-userinfo
• feat/authz_provider_arborist
• feat/aws-cognito-claims
• feat/aws-requesterpays
• feat/aws-rp-impr
• feat/backoff
• feat/base_image
• feat/base_image_update
• feat/capitalization
• feat/cert-audit-log
• feat/ci
• feat/cilogon
• feat/clear-user-visas
• feat/cleversafe-url
• feat/client-credential-grant
• feat/client-credentials
• feat/client-rotate
• feat/codeql
• feat/cognito
• feat/community/oidc-client
• feat/config-db-migration
• feat/config_env
• feat/cookies
• feat/cookies-secure
• feat/create_presigned_url_passports
• feat/custom-data-access
• feat/dataUseAgreement
• feat/db-migrate
• feat/dbenvvar
• feat/dbgap-child-studies
• feat/dbgap-options
• feat/dd
• feat/dd-testing
• feat/default_session
• feat/delete-flow-authz
• feat/deny
• feat/deprecate_legacy_admin_endpoints
• feat/deps
• feat/dockerslim
• feat/encode-url
• feat/expire-client
• feat/expires_in
• feat/federated_identities
• feat/folder-structure
• feat/ftp-support
• feat/ga4gh-scope
• feat/ga4gh_drs
• feat/generic-oidc
• feat/github-actions-ci
• feat/google-linking
• feat/google-user-sa
• feat/googlesync
• feat/gunicorn
• feat/handle-access
• feat/helm-integration-tests
• feat/httponlycookies
• feat/id_from_idp
• feat/idp-info
• feat/idp_email
• feat/image-workflow
• feat/incommon
• feat/incommon-updates
• feat/indexd_password
• feat/ip
• feat/ip_audit_logging
• feat/lint-md
• feat/list-g-groups
• feat/login_ras_visa_parse
• feat/logout
• feat/mcrypt-openssl-test
• feat/mcrypt_to_ccrypt
• feat/metrics
• feat/migrations
• feat/modify-scope
• feat/more-backoffs
• feat/multi-passport
• feat/multi_part_bucket_param
• feat/native-docker-build
• feat/nginx-sidecar
• feat/oauth-clients
• feat/oidc-client
• feat/okta
• feat/okta-client
• feat/only_login_activated_users
• feat/only_login_onboarded_users
• feat/optum-okta
• feat/orcid-login
• feat/passport
• feat/passport-authz-mapping
• feat/passport-cache
• feat/passport-exp
• feat/passport-improve-sync-performance
• feat/passport-update-arborist-in-bulk
• feat/passports-cfg
• feat/poetry
• feat/primary_google_service_account
• feat/privacy-policy
• feat/pxp-4787/enable-specifying-allowed-scopes-in-client-create
• feat/python3.10
• feat/python3.6-buster
• feat/python3.6-buster-tricks
• feat/ras-milestone-3.2-add-visa-parsing-for-data-download
• feat/ras-visas-uinfo
• feat/ras/oidc-handshake
• feat/ras_authn
• feat/ras_expiration_parameter
• feat/ras_global_logout
• feat/ras_logout
• feat/ras_passport_11
• feat/ras_token_management
• feat/read-dbgap
• feat/redis
• feat/reduce_google_iam_updates
• feat/refresh-expires-in
• feat/register
• feat/register-rebase
• feat/release-5.3.3
• feat/remove-travis-for-gh-actions
• feat/remove-veracode
• feat/remove-veracode-config
• feat/remove_metrics_hardcode
• feat/remove_ras_tokens
• feat/remove_role_from_admin_endpoints
• feat/requester-pays
• feat/role-caching-debug
• feat/s3-delete-files
• feat/s3_bucket_regex_unit_test
• feat/satosa-idps
• feat/sec-scan
• feat/sftp_backoff
• feat/shib_secondary
• feat/smart-arborist-sync
• feat/storage_creds
• feat/storage_expiration
• feat/synapse
• feat/synapse-mod
• feat/synapse-userid
• feat/sync
• feat/sync-clients
• feat/telemetry
• feat/telemetry_backup
• feat/test-authutils
• feat/token_management
• feat/update_admin_decorator
• feat/update_visa
• feat/upload-guid
• feat/use_new_visa_authz
• feat/username-limit
• feat/usersync-bulk-arborist
• feat/usersync_update_authz
• feat/usersync_use_ssh_keys
• feat/usync-emails
• feat/uwsgi_queue_test
• feat/visa-validate
• feat/visa_cron_job
• feat/visa_parse
• feat/visa_sync_loging
• feat/visa_update
• feat_python_unittest
• feature/bucket_info_endpoint
• feature/oidc-oauth-groups-rev2
• fence-3.12
• fence_external_contributor_change1
• fix/3.2.4.x
• fix/EA-usersync
• fix/ENABLED_IDENTITY_PROVIDERS
• fix/PPS-2052
• fix/PXP-10939-bad-references
• fix/PXP-6507
• fix/UPSTREAM_IDP_CACHE
• fix/access-token-polling-doesnt-update-arborist
• fix/ancestry
• fix/anonymous_download
• fix/arborist-timeout
• fix/audit-drs
• fix/audit-sub
• fix/audit-upload
• fix/authorize-idp
• fix/authz-does-not-include-open-access-for-some-users
• fix/authz-signed-urls
• fix/await-usersync
• fix/aws_assume_role_bug
• fix/black
• fix/bucket_name
• fix/c999_with_visas
• fix/change-sa-format
• fix/ci-token
• fix/cirrus-bump
• fix/client-create-output
• fix/client-rotate-access
• fix/create-policy
• fix/dbgap-combination
• fix/dbgap-sync-case
• fix/default-idp
• fix/default-idp-oauth2
• fix/delete-no-prefix
• fix/delete_expired_refresh
• fix/delete_with_no_urls
• fix/deny-consent
• fix/dep
• fix/dep-crypt
• fix/dependency_update
• fix/deps
• fix/deps-branch
• fix/docs-link
• fix/docs_on_migration
• fix/driver-warning
• fix/error-json-response
• fix/escape_warning
• fix/expired-sorting
• fix/fence-cleversafe
• fix/fence-default-config
• fix/fence-idp-jwt-val
• fix/fix_usersync
• fix/flaky-test_user_sync_with_visa_sync_job
• fix/gen3authz-await
• fix/generic-oidc
• fix/get-scopes-old-refresh-tkn
• fix/google-api-client
• fix/google-bucket-create
• fix/google-cron
• fix/google-group-update-single-user
• fix/google-group-updates-preserve-on-single-visa-sync
• fix/google-sa-username
• fix/google_primary
• fix/google_update
• fix/group-sync
• fix/gs-cache
• fix/gs_signed_url_signature_bug
• fix/handle-csv-ordering-with-userinfo
• fix/handle-error-for-blank-guid
• fix/handle_none_string_v2
• fix/handle_ras_visa
• fix/hotfix_pin_authutils4
• fix/httplib2
• fix/idp-choice-does-not-work-when-idp-not-in-LOGIN_OPTIONS-cfg
• fix/increase-nginx-buffer-size
• fix/jwt-aud
• fix/key_migration
• fix/key_ops-standard
• fix/link_ext_bucket
• fix/login-fails-for-user-with-many-projects
• fix/login-options
• fix/logout-encoding
• fix/make-region-required-for-S3_Bucket-config
• fix/metrics
• fix/migrate-check
• fix/migration-client-name
• fix/missing-boto
• fix/move_backoff_settings_v2
• fix/multifence-validation
• fix/nginx-magic
• fix/no-plus
• fix/no-token
• fix/no_force_sign
• fix/nonce
• fix/none_string
• fix/oauth2-json
• fix/parsae_urls
• fix/patch-sa
• fix/pentest
• fix/pin_cryptography28_to_avoid_openssl_bug
• fix/pin_gen3authz
• fix/pipeline
• fix/pkey-from-arg
• fix/poetry_idna_dependency
• fix/poetry_no_dev
• fix/populate-idp-for-user-info
• fix/presigned-url-addressing-style
• fix/prom
• fix/prometheus_multiproc_dir
• fix/public-files
• fix/public-region
• fix/python_bump
• fix/python_upgrade
• fix/ras-redirect
• fix/ras/username
• fix/ras_redirect
• fix/ras_test
• fix/ras_url
• fix/redirect
• fix/refactor-bucket-name-and-config
• fix/registration
• fix/registration-digest-method
• fix/remove-dead-code
• fix/remove-hardcoded-empty-list-for-ga4gh_passport_v1
• fix/remove_cors
• fix/renew-access-token
• fix/requirements
• fix/resource-deletion
• fix/revoke-policies-on-usersync
• fix/rm-policies-from-grps
• fix/sa-registration-patch
• fix/sa_dry_run
• fix/sa_email
• fix/samesite-cookie
• fix/service-account-limit
• fix/set-expiration-for-storage-access
• fix/set_proper_botocore_dep
• fix/six-dependency
• fix/skip-grant-from-storage-for-google
• fix/split-secret
• fix/ssh
• fix/ssh-logs
• fix/storage_manager_handling
• fix/storage_manager_handling-1
• fix/synapse
• fix/sync-google
• fix/sync-missing-usr
• fix/sync-override
• fix/temp-authlib
• fix/test_cirrus
• fix/timestamp
• fix/token
• fix/token-revoke
• fix/typo
• fix/update-deny
• fix/update_google_signed_url_logic
• fix/upload-url-for-public-file
• fix/user-undefined-revoke-mfa
• fix/user_projects
• fix/userinfo
• fix/username
• fix/usersync-access
• fix/usersync-none
• fix/usersync-update-role
• fix/usersync_read_error
• fix/version
• fix/visa-expiration
• fix/visa_parse_login
• fix/visa_update_cleanup
• haraprasadj-patch-1
• haraprasadj-patch-5
• incommon-set
• integration202002
• integration202003
• integration202004
• integration202005
• integration202006
• integration202007
• integration202008
• integration202009
• integration202010
• integration202011
• integration202012
• integration202100
• integration202101
• integration202102
• integration202105
• integration202106
• integration202107
• integration202108
• integration202109
• integration202111
• integration202112
• integration202201
• integration202202
• integration202203
• integration202204
• integration202205
• integration202206
• integration202207
• integration202208
• integration202209
• integration202210
• integration202211
• integration202212
• integration202301
• integration202303
• integration202305
• integration202306
• integration202409
• integration202410
• integration202411
• integration202412
• integration202501
• integration202502
• integration202503
• integration202504
• integration202505
• integration202506
• integration202507
• integration202508
• integration202509
• integration202510
• integration_test
• k-burt-uch-patch-1
• k-burt-uch-patch-2
• k-burt-uch-patch-3
• krishnaa05-patch-1
• master
• mfshao-patch-1
• mytest1
• no-libmhash2
• ocshawn-patch-1
• old_stable
• passport-b4-perf
• passport-before-perf
• patch/change_return_message
• pauline
• pauline-debug
• pauline-test
• pauline/aws_assume_role_bug
• pauline/test
• pauline1
• pauline2
• paulineribeyre-patch-1
• paulineribeyre-patch-2
• paulinetest
• profile
• ras_feature
• refactor/arborist-client
• refactor/auth-code
• refactor/oidc
• reusable-unit-test-workflow
• revert-862-chore/dep_test
• sec/blackduck
• snyk-fix-41275a153c76e718fc5ef299e2ab9b8f
• snyk-fix-a6d5ad4494bfb3b699d69cd75de2dd6d
• stable
• temp/test-ci
• test-regist
• test/4.6.0-non-alpine
• test/arborist-ras-data-download
• test/binam_service_account_removal_test
• test/buster-460
• test/ci
• test/custom-data-access
• test/debug
• test/dock
• test/fence-cleversafe
• test/gen3authz
• test/helm_ci
• test/integration-custom-branch
• test/match_pattern
• test/metrics
• test/new_ci_with_adminvm
• test/non-root-wsgi
• test/parse_visas
• test/pipeline_failures_v2
• test/pipeline_failures_v3
• test/prom-refactor
• test/provide_ras_passport
• test/py3pauline
• test/scopes-client-create
• test/test_new_check_quay
• test/unit_test_user_id
• test/usersync
• testing/cdis_jenkins_change
• testing_test
• tmp(test)-temporary-test-branch
• tmp/test
• tmp/test_branch
• tmp/test_new_user_model
• user-gen3

Build # 17680297531

Build Type

push

github

Committed by web-flow

Commit Message

Merge pull request #1238 from uc-cdis/chore/fix_improper_certificate_validation_pps_1936

Replace AutoAddPolicy with RejectPolicy and load known hosts to prevent man in the middle attacks

Run Details

8402 of 11220 relevant lines covered (74.88%)

0.75 hits per line