NHSO-0000: Security fixes.

.github/workflows/continuous-integration.yml

@@ -33,7 +33,7 @@ jobs:
         run: python -m pip install --upgrade pip setuptools wheel
 
       - name: Install poetry
-        run: pip install "poetry<2.0.0"
+        run: 'pip install --only-binary :all: "poetry==2.4.1"'
 
       - name: Cache poetry packages
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0

azure/templates/run-integration-tests.yml

@@ -10,6 +10,10 @@
   - name: private_key_file_path
     type: string
 
+variables:
+  WorkingDir: ${{ parameters.working_directory }}
+  TargetUrl: ${{ parameters.target_url }}
+
 steps:
   - task: UseDotNet@2
     displayName: 'Use .NET Core sdk'
@@ -43,21 +47,21 @@
       command: 'custom'
       custom: vstest
       arguments: >
-        ${{ parameters.working_directory }}/Publish/Nhs.App.Api.Integration.Tests/Nhs.App.Api.Integration.Tests.dll
-        --logger:"trx;LogFileName=${{ parameters.working_directory }}/IntegrationTests/Tests.trx"
-        --settings:${{ parameters.working_directory }}/Publish/Nhs.App.Api.Integration.Tests/test.runsettings
+        $(WorkingDir)/Publish/Nhs.App.Api.Integration.Tests/Nhs.App.Api.Integration.Tests.dll
+        --logger:"trx;LogFileName=$(WorkingDir)/IntegrationTests/Tests.trx"
+        --settings:$(WorkingDir)/Publish/Nhs.App.Api.Integration.Tests/test.runsettings
         -- TestRunParameters.Parameter(name="\""ApigeeApiKey"\"",value="\""$(CLIENT_ID)"\"")
-        -- TestRunParameters.Parameter(name="\""ApplicationUrl"\"",value="\""${{ parameters.target_url }}"\"")
+        -- TestRunParameters.Parameter(name="\""ApplicationUrl"\"",value="\""$(TargetUrl)"\"")
         -- TestRunParameters.Parameter(name="\""TokenEndpoint"\"",value="\""${{ parameters.token_url }}"\"")
         -- TestRunParameters.Parameter(name="\""IssuerKey"\"",value="\""$(JWT_TESTING_API_KEY)"\"")
         -- TestRunParameters.Parameter(name="\""PrivateKeyFilePath"\"",value="\""${{ parameters.private_key_file_path }}"\"")
         -- TestRunParameters.Parameter(name="\""KidValue"\"",value="\"test-1\"")
 
   - task: PublishTestResults@2
-    displayName: 'Publish Test Results ${{ parameters.working_directory }}/IntegrationTests/Tests.trx'
+    displayName: 'Publish Test Results $(WorkingDir)/IntegrationTests/Tests.trx'
     inputs:
       testResultsFormat: VSTest
-      testResultsFiles: '${{ parameters.working_directory }}/IntegrationTests/Tests.trx'
+      testResultsFiles: '$(WorkingDir)/IntegrationTests/Tests.trx'
       mergeTestResults: true
       testRunTitle: 'Integration Tests'
     continueOnError: true

sandbox/Dockerfile

@@ -1,10 +1,10 @@
-FROM node:12
+FROM node:24
 
 COPY . /sandbox
 
 WORKDIR /sandbox
 
-RUN npm install
+RUN npm install --ignore-scripts
 
 EXPOSE 9000