Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update(deps): vulnerabilities cleanup #7315

Merged
merged 9 commits into from
Jan 17, 2025

Conversation

cx-ruiaraujo
Copy link
Contributor

@cx-ruiaraujo cx-ruiaraujo commented Jan 16, 2025

Proposed Changes

  • Maintenance checkup: upgrade packages, images and GitHub actions
  • Add '.github' folder to trivy and grype fs scan exclusions
  • Refactor UnitTest 'resolveCRLFFile' due upgrade of 'github.com/stretchr/testify' (v1.9.0 --> v1.10.0) that changed NotRegexp behavior

I submit this contribution under the Apache-2.0 license.

@cx-ruiaraujo cx-ruiaraujo requested a review from a team as a code owner January 16, 2025 18:12
@cx-ruiaraujo cx-ruiaraujo self-assigned this Jan 16, 2025
Copy link
Contributor

kics-logo

KICS version: v2.1.3

Category Results
CRITICAL CRITICAL 0
HIGH HIGH 0
MEDIUM MEDIUM 0
LOW LOW 0
INFO INFO 0
TRACE TRACE 0
TOTAL TOTAL 0
Metric Values
Files scanned placeholder 1
Files parsed placeholder 1
Files failed to scan placeholder 0
Total executed queries placeholder 48
Queries failed to execute placeholder 0
Execution time placeholder 0

@cx-ruiaraujo cx-ruiaraujo added the security Security issues label Jan 16, 2025
Copy link
Contributor

@ArturRibeiro-CX ArturRibeiro-CX left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@cx-ruiaraujo cx-ruiaraujo merged commit ffa08cf into master Jan 17, 2025
29 checks passed
@cx-ruiaraujo cx-ruiaraujo deleted the ruiar-vulnerabilities-cleanup branch January 17, 2025 12:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security Security issues
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants