Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Audit Snyk check/fix 2.6 #11226

Merged
merged 3 commits into from
Jul 10, 2024
Merged

Audit Snyk check/fix 2.6 #11226

merged 3 commits into from
Jul 10, 2024

Conversation

geo-ghci-int[bot]
Copy link
Contributor

@geo-ghci-int geo-ghci-int bot commented Jul 9, 2024

⠋ Running snyk test for /tmp/tmpnsrr44se/c2cgeoportal
► Running snyk test for /tmp/tmpnsrr44se/c2cgeoportal

  • Looking for supported Python items

✔ Looking for supported Python items
⠋ Processing 4 requirements.txt items⠙ Processing 3 Pipfile items✔ Processed 4 requirements.txt items

  • Checking pipenv version
    ⚠️ 2022.1.8 pipenv version detected. Currently the following pipenv versions are supported: 2022.10.12,2022.9.21,2022.8.31,2022.7.24,2022.6.7,2022.5.2,2022.4.21,2021.11.23,2020.11.4,2020.8.13,2020.6.2,2020.5.28,2018.11.26,2018.11.14,2018.10.13,2018.10.9,2018.7.1,2018.6.25
    ✔ Processed 3 Pipfile items
    ✔ Done

Successful fixes:

admin/requirements.txt
✔ Pinned zipp from 3.7.0 to 3.19.1

geoportal/requirements.txt
✔ Pinned zipp from 3.7.0 to 3.19.1

Unresolved items:

Pipfile
✖ There is no actionable remediation to apply

ci/Pipfile
✖ There is no actionable remediation to apply

doc/Pipfile
✖ There is no actionable remediation to apply

commons/requirements.txt
✖ There is no actionable remediation to apply

docker/qgisserver/requirements.txt
✖ There is no actionable remediation to apply
Summary:
5 items were not fixed
2 items were successfully fixed
4 items were not vulnerable

18 issues: 2 Critical | 2 Medium | 14 Low
2 issues are fixable
2 issues were successfully fixed

Tip: Re-run in debug mode to see more information: DEBUG=*snyk* . If the issue persists contact [email protected]

@geo-ghci-int geo-ghci-int bot enabled auto-merge (squash) July 9, 2024 18:56
@geo-ghci-int geo-ghci-int bot merged commit abb01fa into 2.6 Jul 10, 2024
13 checks passed
@geo-ghci-int geo-ghci-int bot deleted the ghci/audit/snyk/2.6 branch July 10, 2024 13:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant