Merge branch 'main' of https://github.com/OWASP/Nest into light-dark-theme

* 'main' of https://github.com/OWASP/Nest:
  Turn server tokens off
  Update issue index and Nginx config
  Update Nginx config
  Make some Repository fields optional
  Update Repository model
  Set up Sentry
  Update CI/CD
  Bump openai from 1.47.0 to 1.50.2 in /backend (OWASP#18)
  Bump pytest-cov from 4.1.0 to 5.0.0 in /backend (OWASP#16)
  Bump ruff from 0.5.7 to 0.6.8 in /backend (OWASP#17)
  Update issue-manager config
  Add issue manager
  Update dependabot config (docker)
  Update dependabot config

Author: VedmaPranav

.github/dependabot.yml

@@ -1,12 +1,12 @@
 version: 2
 updates:
   - package-ecosystem: docker
-    directory: /
+    directory: /backend
     schedule:
       interval: daily
 
   - package-ecosystem: pip
-    directory: /
+    directory: /backend
     schedule:
       interval: daily
     target-branch: main

.github/workflows/ci-cd.yaml

@@ -3,9 +3,16 @@ name: CI/CD
 on:
   merge_group:
   pull_request:
+    branches:
+      - main
   push:
+    branches:
+      - main
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 concurrency:
   cancel-in-progress: true
   group: ${{ github.repository }}-${{ github.workflow }}-${{ github.head_ref || github.ref_name }}

.github/workflows/issue-manager.yaml

@@ -0,0 +1,18 @@
+name: Issue manager
+
+on:
+  issue_comment:
+    types:
+      - created
+
+jobs:
+  assign-issue:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - uses: owasp-actions/issue-manager@v0
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}

backend/.env/template

@@ -11,6 +11,7 @@ DJANGO_DB_PORT=None
 DJANGO_DB_USER=None
 DJANGO_OPEN_AI_SECRET_KEY=None
 DJANGO_SECRET_KEY=None
+DJANGO_SENTRY_DSN=None
 DJANGO_SLACK_APP_TOKEN=None
 DJANGO_SLACK_BOT_TOKEN=None
 DJANGO_SLACK_SIGNING_SECRET=None

backend/apps/github/admin.py

@@ -67,7 +67,7 @@ class RepositoryAdmin(admin.ModelAdmin):
         "organization",
     )
     ordering = ("-created_at",)
-    search_fields = ("name",)
+    search_fields = ("name", "node_id")
 
     def custom_field_github_url(self, obj):
         """Repository GitHub URL."""

backend/apps/github/management/commands/github_update_owasp_organization.py

@@ -51,7 +51,7 @@ def handle(self, *_args, **options):
             sort="created",
             direction="desc",
         )
-        gh_repositories_count = gh_repositories.totalCount - offset
+        gh_repositories_count = gh_repositories.totalCount
         for idx, gh_repository in enumerate(gh_repositories[offset:]):
             prefix = f"{idx + offset + 1} of {gh_repositories_count}"
             entity_key = gh_repository.name.lower()

backend/apps/github/migrations/0011_alter_repository_funding_yml_and_more.py

@@ -0,0 +1,31 @@
+# Generated by Django 5.1.1 on 2024-10-01 16:24
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("github", "0010_alter_repositorycontributor_unique_together"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="repository",
+            name="funding_yml",
+            field=models.JSONField(blank=True, default=dict, verbose_name="FUNDING.yml data"),
+        ),
+        migrations.AlterField(
+            model_name="repository",
+            name="homepage",
+            field=models.CharField(
+                blank=True, default="", max_length=100, verbose_name="Homepage"
+            ),
+        ),
+        migrations.AlterField(
+            model_name="repository",
+            name="pages_status",
+            field=models.CharField(
+                blank=True, default="", max_length=20, verbose_name="Pages status"
+            ),
+        ),
+    ]

backend/apps/github/migrations/0012_alter_repository_description_and_more.py

@@ -0,0 +1,29 @@
+# Generated by Django 5.1.1 on 2024-10-01 16:35
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("github", "0011_alter_repository_funding_yml_and_more"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="repository",
+            name="description",
+            field=models.CharField(
+                blank=True, default="", max_length=1000, verbose_name="Description"
+            ),
+        ),
+        migrations.AlterField(
+            model_name="repository",
+            name="languages",
+            field=models.JSONField(blank=True, default=dict, verbose_name="Languages"),
+        ),
+        migrations.AlterField(
+            model_name="repository",
+            name="topics",
+            field=models.JSONField(blank=True, default=list, verbose_name="Topics"),
+        ),
+    ]

backend/apps/github/models/issue.py

@@ -92,7 +92,10 @@ def __str__(self):
     def is_indexable(self):
         """Issues to index."""
         return (
-            self.state == self.State.OPEN and not self.is_locked and self.repository.is_indexable
+            self.state == self.State.OPEN
+            and not self.is_locked
+            and not self.assignees.exists()
+            and self.repository.is_indexable
         )
 
     @property

backend/apps/github/models/managers/issue.py

@@ -18,6 +18,9 @@ def get_queryset(self):
             .select_related(
                 "repository",
             )
+            .prefetch_related(
+                "assignees",
+            )
             .filter(
                 repository__project__isnull=False,
                 state="open",