circleci-public / circleci-demo-python-django

Example Django application running on CircleCI

CircleCI Demo Application: Python / Django

This is an example application showcasing how to build test and deploy a Django app on CircleCI 2.0.

You can follow along with this project by reading the documentation.

Features of the demo

• regularly updated to use latest Python and Django (currently Python 3.6.4 and Django 2.0.1)
• uses pipenv to install and manage dependencies and virtualenvs on CircleCI
• shows usage of caching on CircleCI 2.0 to speed up builds. Makes use of Ppipfile.lock to invalidate cache if dependencies change
• runs tests against a PostgreSQL database
• store and upload test result in Junit XML format with unittest-xml-reporting to enable Test Summary and Insights on CircleCI

About the app: django_local_library

Tutorial "Local Library" website written in Django. This is based on the excellent MDN Django tutorial..

---

This web application creates an online catalog for a small local library, where users can browse available books and manage their accounts.

The main features that have currently been implemented are:

• There are models for books, book copies, genre, language and authors.
• Users can view list and detail information for books and authors.
• Admin users can create and manage models. The admin has been optimised (the basic registration is present in admin.py, but commented out).
• Librarians can renew reserved books

License Information

Documentation (guides, references, and associated images) is licensed as Creative Commons Attribution-NonCommercial-ShareAlike CC BY-NC-SA. The full license can be found here, and the human-readable summary here.

Everything in this repository not covered above is licensed under the included CC0 license.

circleci-demo-python-django's Issues

less User Friendly

This cannot be termed much as an issue but the look and feel of the website can be bloomed by adding bootstrap. This way it will be more attractive as well.

test command not working

In current pipenv, pipenv run "python manage.py test" does not work.

$ pipenv run "python manage.py test"
Error: the command python manage.py test could not be found within PATH or Pipfile's [scripts].

It should be pipenv run python manage.py test .

Update dependencies for security vulnerabilities

pipfile.lock and requirements.txt need the following change applied:
django>=2.0.8

CVE-2018-14574
moderate severity
Vulnerable versions: >= 2.0, < 2.0.8
Patched version: 2.0.8
django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.

CVE-2018-6188
moderate severity
Vulnerable versions: >= 2.0.0, < 2.0.2
Patched version: 2.0.2
django.contrib.auth.forms.AuthenticationForm in Django 2.0 before 2.0.2, and 1.11.8 and 1.11.9, allows remote attackers to obtain potentially sensitive information by leveraging data exposure from the confirm_login_allowed() method, as demonstrated by discovering whether a user account is inactive.

Branch part of cache key

Hi, in .circleci/config.yml, you use {{ .Branch }} in addition to a checkusm of requirements.txt as part of the cache key for the python virtual environment. Could you explain the reasoning behind this? I see this is not the case for the nodejs demo repo with package.json

Pipfile.lock and Requirements

I see that the project has these 2 options to deal with dependencies. I believe one of them should be removed

octavia9