From c38da9db0beaa87274bb4cb74065a0bbef12e45b Mon Sep 17 00:00:00 2001 From: "Jokob @NetAlertX" <96159884+jokob-sk@users.noreply.github.com> Date: Sun, 7 Dec 2025 22:26:44 +0000 Subject: [PATCH] cryptography build prevention + increase build timeouts + test cleanup Signed-off-by: GitHub --- .github/workflows/docker_prod.yml | 2 +- Dockerfile | 6 ++---- test/api_endpoints/test_graphq_endpoints.py | 2 +- 3 files changed, 4 insertions(+), 6 deletions(-) diff --git a/.github/workflows/docker_prod.yml b/.github/workflows/docker_prod.yml index f3039ad9..22e0ae6d 100755 --- a/.github/workflows/docker_prod.yml +++ b/.github/workflows/docker_prod.yml @@ -17,7 +17,7 @@ on: jobs: docker: runs-on: ubuntu-latest - timeout-minutes: 30 + timeout-minutes: 60 permissions: contents: read packages: write diff --git a/Dockerfile b/Dockerfile index cd0a034b..11b243c3 100755 --- a/Dockerfile +++ b/Dockerfile @@ -36,15 +36,13 @@ RUN apk add --no-cache \ libffi-dev \ openssl-dev \ git \ - rust \ - cargo \ && python -m venv /opt/venv # Upgrade pip/wheel/setuptools and install Python packages RUN python -m pip install --upgrade pip setuptools wheel && \ - pip install --no-cache-dir -r /tmp/requirements.txt && \ + pip install --prefer-binary --no-cache-dir -r /tmp/requirements.txt && \ chmod -R u-rwx,g-rwx /opt - + # second stage is the main runtime stage with just the minimum required to run the application # The runner is used for both devcontainer, and as a base for the hardened stage. FROM alpine:3.22 AS runner diff --git a/test/api_endpoints/test_graphq_endpoints.py b/test/api_endpoints/test_graphq_endpoints.py index 374bd524..d09c9ea3 100644 --- a/test/api_endpoints/test_graphq_endpoints.py +++ b/test/api_endpoints/test_graphq_endpoints.py @@ -38,7 +38,7 @@ def test_graphql_debug_get(client): def test_graphql_post_unauthorized(client): - """POST /graphql without token should return 401""" + """POST /graphql without token should return 403""" query = {"query": "{ devices { devName devMac } }"} resp = client.post("/graphql", json=query) assert resp.status_code == 403