Resolved outstanding Sonar issues

Author: dlzhry2nhs

.github/workflows/deploy-backend.yml

@@ -48,14 +48,13 @@ env: # Sonarcloud - do not allow direct usage of untrusted data
   ENVIRONMENT: ${{ inputs.environment }}
   SUB_ENVIRONMENT: ${{ inputs.sub_environment }}
 
-permissions:
-  id-token: write
-  contents: read
-
 run-name: Deploy Backend - ${{ inputs.environment }} ${{ inputs.sub_environment }}
 
 jobs:
   terraform-plan:
+    permissions:
+      id-token: write
+      contents: read
     runs-on: ubuntu-latest
     environment:
       name: ${{ inputs.environment }}
@@ -89,6 +88,9 @@ jobs:
           path: infrastructure/instance/tfplan
 
   terraform-apply:
+    permissions:
+      id-token: write
+      contents: read
     needs: terraform-plan
     runs-on: ubuntu-latest
     environment:

.github/workflows/run-e2e-tests.yml

@@ -59,6 +59,8 @@ permissions:
   contents: read
 
 jobs:
+  permissions:
+    contents: read
   wait-for-deployment:
     runs-on: ubuntu-latest
     environment: ${{ inputs.apigee_environment }}
@@ -109,6 +111,9 @@ jobs:
           fi
 
   e2e-tests:
+    permissions:
+      id-token: write
+      contents: read
     runs-on: ubuntu-latest
     needs: [wait-for-deployment]
     environment: ${{ inputs.apigee_environment }}
@@ -202,6 +207,9 @@ jobs:
         run: poetry run python -m unittest
 
   batch-e2e-tests:
+    permissions:
+      id-token: write
+      contents: read
     needs: [wait-for-deployment, e2e-tests]
     # Only actually depend on wait-for-deployment, but run after e2e-tests
     if: ${{ !cancelled() && needs.wait-for-deployment.result == 'success' && needs.wait-for-deployment.outputs.RUN_BATCH_E2E_TESTS == 'true' }}

lambdas/backend/src/controller/parameter_parser.py

@@ -166,7 +166,7 @@ def parse_search_params(search_params_in_req: dict[str, list[str]]) -> dict[str,
     """Ensures the search params provided in the event do not contain duplicated keys. Will split the parameters
     provided by comma separators. Raises a ParameterExceptionError for duplicated keys. Existing business logic stipulated
     that the API only accepts comma separated values rather than multi-value."""
-    if any([len(values) > 1 for _, values in search_params_in_req.items()]):
+    if any(len(values) > 1 for _, values in search_params_in_req.items()):
         raise ParameterExceptionError(DUPLICATED_PARAMETERS_ERROR_MESSAGE)
 
     parsed_params = {}

lambdas/shared/src/common/models/errors.py

@@ -67,7 +67,7 @@ def to_operation_outcome(self) -> dict:
 
 class ApiValidationError(RuntimeError):
     def to_operation_outcome(self) -> dict:
-        pass
+        raise NotImplementedError("Improper usage: base class")
 
 
 @dataclass

lambdas/shared/tests/test_common/test_errors.py

@@ -128,13 +128,6 @@ def test_errors_unhandled_response_error(self):
         self.assertEqual(issue.get("code"), errors.Code.exception)
         self.assertEqual(issue.get("diagnostics"), f"{test_message}\n{test_response}")
 
-    def test_errors_api_validation_error(self):
-        """Test correct operation of ApiValidationError"""
-        with self.assertRaises(errors.ApiValidationError) as context:
-            raise errors.ApiValidationError()
-        outcome = context.exception.to_operation_outcome()
-        self.assertIsNone(outcome)
-
     def test_errors_custom_validation_error(self):
         """Test correct operation of CustomValidationError"""
         test_message = "test_message"