Bump eslint-import-resolver-typescript from 2.7.1 to 3.6.3 in /frontends/admin-panel

.bandit

@@ -0,0 +1,3 @@
+[bandit]
+targets: recidiviz
+skips: B101,B311,B404,B410,B608

.coveragerc

@@ -0,0 +1,2 @@
+[run]
+omit = lib/*,recidiviz/tests/*,recidiviz/utils/data_migration.py

.devcontainer/README.md

@@ -0,0 +1,38 @@
+# Dev Container
+
+This directory contains configurations for creating a [Dev Container](https://code.visualstudio.com/docs/devcontainers/containers) for pulse-data. Dev containers are an optional way to set up a VSCode environment, where development occurs inside a container (still on the user's machine) that is configured in a standardized way.
+
+## Pre-reqs
+1. If you do not already have gcloud configured on your computer, log in to gcloud by running the following two commands:
+
+```bash
+gcloud auth login # Gets credentials to interact with services via the CLI
+gcloud auth application-default login # Gets credentials which will be automatically read by our client libraries
+```
+1. Verify that the directory `~/.config/gcloud` exists. It should have been created when you authenticated to Gcloud
+
+## How to use
+
+Dependencies:
+
+1. [VSCode](https://code.visualstudio.com/download)
+1. Docker as per [VSCode requirements](https://code.visualstudio.com/docs/devcontainers/containers#_system-requirements)
+1. Install the Docker VSCode extension (`ms-azuretools.vscode-docker`)
+1. Install the Microsoft Dev Containers VSCode extension (`ms-vscode-remote.remote-containers`)
+
+To use:
+
+1. Open the pulse-data repository inside of VSCode
+1. You may see a pop-up that says you can open this workspace inside a dev container. If you do, click on "Reopen In Container". If not, open the command palette (cmd-shift-P on a mac) and select "Dev Containers: Reopen In Container".
+1. Be patient; it takes some time to create the container and install all dependencies. You can click on "Starting Dev Container (show log)" (or "Dev Containers: Show Container Log" from the command palette) to see progress. When it's done, you'll see the message "Done. Press any key to close the terminal." in the logs.
+1. [Optional] Open a new terminal window by choosing "Terminal: Create New Terminal" from the command palette.
+
+After the first time you build the container, you'll also need to do the following:
+
+1. Select the PipEnv python interpreter by choosing "Python: Select Interpreter" from the command palette and selecting the one that says PipEnv next to it
+
+Limitations:
+
+1. Running services via docker (e.g. admin panel, case triage backend, etc.) does not work (yet)
+1. The container might not build on windows due to the way we share gcloud credentials between your machine and the container.
+1. As of June 2023, this is new functionality for Recidiviz there are likely to be some rough edges! If you use this and encounter any weirdness, please post in Slack in #eng or file a ticket!

.devcontainer/devcontainer.json

@@ -0,0 +1,79 @@
+// For format details, see https://aka.ms/devcontainer.json. For config options, see the
+// README at: https://github.com/devcontainers/templates/tree/main/src/python
+{
+  "name": "Python 3",
+  // Or use a Dockerfile or Docker Compose file. More info: https://containers.dev/guide/dockerfile
+  "image": "mcr.microsoft.com/devcontainers/python:0-3.11",
+  // Features to add to the dev container. More info: https://containers.dev/features.
+  "features": {
+    "ghcr.io/devcontainers/features/java:1": {},
+    "ghcr.io/devcontainers-contrib/features/pipenv:2": {},
+    "ghcr.io/devcontainers-contrib/features/postgres-asdf:1": {},
+    "ghcr.io/dhoeric/features/google-cloud-cli:1": {},
+    "ghcr.io/devcontainers/features/common-utils:2": {
+      "configureZshAsDefaultShell": true
+    },
+    // gdal and cmake are needed to install certain pip dependencies.
+    // micromamba lets us install these easily from conda with a small footprint.
+    "ghcr.io/mamba-org/devcontainer-features/micromamba:1": {
+      "channels": "conda-forge",
+      "packages": "gdal cmake"
+    },
+    "docker-in-docker": {
+      "version": "latest",
+      "moby": true,
+      "dockerDashComposeVersion": "v1",
+      "_comment": "VS Code runs as a Docker container. So if we want to build/run Docker, we need to support running Docker within Docker"
+    },
+    "terraform": {
+      // Note: this verison number should be kept in sync with the ones in Dockerfile,
+      // .github/workflows/ci.yml, recidiviz/tools/deploy/terraform/terraform.tf, and
+      // recidiviz/tools/deploy/deploy_helpers.sh
+      "version": "1.7.0",
+      "tflint": "latest",
+      "terragrunt": "latest",
+      "_comment": "Terraform is needed if we want to run deployments from within VS Code Containers"
+    }
+  },
+
+  // Use 'forwardPorts' to make a list of ports inside the container available locally.
+  // "forwardPorts": [],
+
+  // Use 'postCreateCommand' to run commands after the container is created.
+  "postCreateCommand": "sh .devcontainer/postCreate.sh",
+  // The git directory isn't ready until the container has been started, so put `git config`
+  // commands into a separate script.
+  "postStartCommand": "sh .devcontainer/postStart.sh ${containerWorkspaceFolder}",
+
+  "customizations": {
+    "vscode": {
+      "extensions": [
+        "DavidAnson.vscode-markdownlint",
+        "dbaeumer.vscode-eslint",
+        "eamodio.gitlens",
+        "esbenp.prettier-vscode",
+        "hashicorp.terraform",
+        "mechatroner.rainbow-csv",
+        "ms-python.black-formatter",
+        "ms-python.python",
+        "samuelcolvin.jinjahtml",
+        "stkb.rewrap"
+      ]
+    }
+  },
+
+  // Mount local .config/gcloud directory to get access to existing gcloud credentials. This way,
+  // the user doesn't have to reauthenticate with gcloud every time the container is rebuilt.
+  // This won't work with GH codespaces, but based on https://github.com/Recidiviz/pulse-data/pull/21325#issuecomment-1574052908
+  // it sounds like that's a non-goal.
+  // TODO(#21470): Figure out how to make this work for Windows (configs are in %APPDATA%\gcloud)
+  "mounts": [
+    "source=${localEnv:HOME}/.config/gcloud,target=/home/vscode/.config/gcloud,type=bind,consistency=cached"
+  ]
+
+  // Configure tool-specific properties.
+  // "customizations": {},
+
+  // Uncomment to connect as root instead. More info: https://aka.ms/dev-containers-non-root.
+  // "remoteUser": "root"
+}

.devcontainer/postCreate.sh

@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+
+# Add hooks
+cp -R githooks/ .git/hooks/
+chmod +x .git/hooks/*
+
+pipenv sync --dev
+
+# Install pre-commit hooks
+pipenv run pre-commit install --overwrite
+
+# Clear out cache which could have been populated by running tests under a different system
+# architecture (such as outside the container). See https://nicolasbouliane.com/blog/importmismatcherror-python-fix
+find . \( -name '__pycache__' -or -name '*.pyc' \) -delete

.devcontainer/postStart.sh

@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+
+# See https://www.kenmuse.com/blog/avoiding-dubious-ownership-in-dev-containers/
+git config --global --add safe.directory "$1"
+
+# Set git blame to ignore noisy commits
+git config --replace-all blame.ignoreRevsFile .git-blame-ignore-revs

.dockerignore

@@ -0,0 +1,224 @@
+# Ignoring Dockle Alerts
+
+# use latest version: Ignoring because the container, that was Dockle-tested, was built with
+# the latest image, and has nothing to do with the Dockerfile
+
+DKL-DI-0006
+
+# storing credentials in env var/files
+# Ignoring because in prior conversations with Aurora, there are no actual secrets being exposed in the
+# Dockerfile
+CIS-DI-0010
+
+# use non-root user
+# Ignoring because there is no actual security risk here and no need to change the user
+CIS-DI-0001
+
+## -- Keep everything below in sync with .gcloudignore -- ##
+
+# git
+.git/
+
+# Gitbook
+docs/
+
+## -- Keep everything below in sync with .gitignore -- ##
+
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[cod]
+*$py.class
+
+# C extensions
+*.so
+
+# Emacs files
+*~
+\#*\#
+/.emacs.desktop
+/.emacs.desktop.lock
+*.elc
+auto-save-list
+tramp
+.\#*
+
+# Vim backup files
+*.sw[op]
+
+# Distribution / packaging
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib64/
+parts/
+.pytest_cache/
+sdist/
+var/
+wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+lib/
+
+# PyInstaller
+#  Usually these files are written by a python script from a template
+#  before PyInstaller builds the exe, so as to inject date/other infos into it.
+*.manifest
+*.spec
+
+# Installer logs
+pip-log.txt
+pip-delete-this-directory.txt
+
+# Unit test / coverage reports
+htmlcov/
+.tox/
+coverage/
+.coverage
+.coverage.*
+.cache
+nosetests.xml
+coverage.xml
+*.cover
+.hypothesis/
+
+# Translations
+*.mo
+*.pot
+
+# Django stuff:
+*.log
+.static_storage/
+.media/
+local_settings.py
+
+# Flask stuff:
+instance/
+.webassets-cache
+
+# Scrapy stuff:
+.scrapy
+
+# Sphinx documentation
+docs/_build/
+
+# PyBuilder
+target/
+
+# Jupyter Notebook
+.ipynb_checkpoints
+
+# R
+.Rhistory
+
+# pyenv
+.python-version
+
+# celery beat schedule file
+celerybeat-schedule
+
+# SageMath parsed files
+*.sage.py
+
+# PyCharm files
+.idea/
+
+# VSCode files
+.vscode/
+
+# Environments
+.env
+.env.*
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+.firebase/
+.runtimeconfig.json
+service_account.json
+
+# Spyder project settings
+.spyderproject
+.spyproject
+
+# Rope project settings
+.ropeproject
+
+# mkdocs documentation
+/site
+
+# mypy
+.mypy_cache/
+
+# Local development
+local.yaml # keep in case any developers still have them
+secrets.yaml # keep in case any developers still have them
+/queue.yaml
+
+#pytest
+.pytest_cache/
+
+# Mac
+.DS_Store
+
+# Terraform
+**/.terraform/*
+*.tfstate
+*.tfstate.*
+*.tfvars
+# Used to store temporary files
+**/.tfout/*
+
+# Typescript
+**/node_modules
+.yalc
+yalc.lock
+*.tsbuildinfo
+
+# Stackdriver Traces
+traces
+
+# Local emulator files
+recidiviz/local/**/*
+
+# Local Case Triage files
+recidiviz/case_triage/local/**/*
+
+# Local Justice Counts files
+recidiviz/justice_counts/control_panel/local/**/*
+
+# Local Asset Generation files
+nodejs/asset-generation/local
+
+# ESLint Cache
+.eslintcache
+
+# Deployment artifacts
+recidiviz/tools/deploy/dist/
+recidiviz/tools/deploy/log/
+
+# Binaries
+recidiviz/tools/postgres/log/
+recidiviz/tools/postgres/vendor/
+
+# Test fixtures
+recidiviz/tests/big_query/fixtures/
+
+# Tool logs
+logs/
+get-pip.py
+*.code-workspace
+
+# Local Justice Counts files
+recidiviz/justice_counts/control_panel/local/**/*
+
+# Terraform cache
+recidiviz/tools/deploy/terraform/.terraform
+