feat: hasura

[revolunet]

Avec intégration d'hasura avec les rôles keycloak

• Keycloak 19
• JWT refreshs
• Hasura seeds in dev
• Docs
• Kontinuous

[gitguardian]

⚠️ GitGuardian has uncovered 12 secrets following the scan of your pull request.

Please consider investigating the findings and remediating the incidents. Failure to do so may lead to compromising the associated services or software components.

🔎 Detected hardcoded secrets in your pull request

GitGuardian id	Secret	Commit	Filename
3513932	Generic High Entropy Secret	71544ca	.env.development	View secret
3513932	Generic High Entropy Secret	71544ca	.env.development	View secret
3513932	Generic High Entropy Secret	71544ca	.env.production	View secret
3513932	Generic High Entropy Secret	71544ca	.env.staging	View secret
3513932	Generic High Entropy Secret	8d50dc2	.env.development	View secret
3513932	Generic High Entropy Secret	8d50dc2	.env.production	View secret
3513932	Generic High Entropy Secret	8d50dc2	.env.staging	View secret
3513932	Generic High Entropy Secret	2bfc7b7	.env.development	View secret
3513932	Generic High Entropy Secret	2bfc7b7	.env.production	View secret
3513932	Generic High Entropy Secret	2bfc7b7	.env.staging	View secret
3513932	Generic High Entropy Secret	95b9b81	.env.production	View secret
3513932	Generic High Entropy Secret	20beea1	.env.staging	View secret

🛠 Guidelines to remediate hardcoded secrets

1. Understand the implications of revoking this secret by investigating where it is used in your code.
2. Replace and store your secrets safely. Learn here the best practices.
3. Revoke and rotate these secrets.
4. If possible, rewrite git history. Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.

To avoid such incidents in the future consider

• following these best practices for managing and storing secrets including API keys and other credentials
• install secret detection on pre-commit to catch secret before it leaves your machine and ease remediation.

---

<sup>🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.

Our GitHub checks need improvements? Share your feedbacks!</sup>

[socket-security]

Socket Security Report

Dependency issues detected. If you merge this pull request, you will not be alerted to the instances of these issues again.

📜 New install scripts detected

A dependency change in this PR is introducing new install scripts to your install step.

Package	Script field	Location
@sentry/cli@1.74.5 (upgraded)	install	package.json via @sentry/nextjs@7.8.1, @sentry/webpack-plugin@1.19.0
hasura-cli@2.9.0 (added)	postinstall	package.json

Socket.dev scan summary

Issue	Status
Did you mean?	✅ no new possible package typos
Install scripts	⚠️ 2 new install scripts detected
Telemetry	✅ no new telemetry
Troll package	✅ no new troll packages
Malware	✅ no new malware
Native code	✅ no new native modules

Powered by socket.dev

[maxgfr]

J'ai oublié de mettre en commentaire mais pourquoi avons-nous supprimer keycloak/providers/keycloak-theme.jar

[revolunet]

J'ai oublié de mettre en commentaire mais pourquoi avons-nous supprimer keycloak/providers/keycloak-theme.jar

Non il n'est pas supprimé, j'ai juste remplacé par la dernière version

[maxgfr]

🔥

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
6 Code Smells

No Coverage information
0.0% Duplication

[github-actions]

🎉 Deployment for commit d0f8dec :

Ingresses

• 🚀 https://hasura-template-hasura.dev.fabrique.social.gouv.fr/
• 🚀 https://keycloak-template-hasura.dev.fabrique.social.gouv.fr/
• 🚀 https://template-hasura.dev.fabrique.social.gouv.fr/

Docker images

• 📦 docker pull harbor.fabrique.social.gouv.fr/fabrique/template/app:sha-d0f8decbf39901e23387ab22e2ebe856c37dd7fc
• 📦 docker pull harbor.fabrique.social.gouv.fr/fabrique/template/hasura:sha-d0f8decbf39901e23387ab22e2ebe856c37dd7fc

Debug

• 📕 Loki logs for namespace template-hasura
• 📈 Pods monitoring for namespace template-hasura
• 📈 Workloads monitoring for namespace template-hasura
• 👮‍♂️ Namespace rancher template-hasura
• 👮‍♂️ Deployment app
• 👮‍♂️ Deployment hasura

[SocialGroovyBot]

🎉 This PR is included in version 1.13.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀