Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 6 vulnerabilities + Dependency Management Fixes #1195

Merged
merged 10 commits into from
May 9, 2024
Merged

[Snyk] Fix for 6 vulnerabilities + Dependency Management Fixes #1195

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
4173af0
fix: requirements/requirements.dev.txt to reduce vulnerabilities
snyk-bot May 7, 2024
d1989db
fix snyk issues
sb-benohe May 7, 2024
c6cb508
Match Dev and Prod
sb-benohe May 7, 2024
8fcb013
Django 4.2.11
sb-benohe May 7, 2024
951d2c1
Fix hard coded deps
sb-benohe May 7, 2024
be7f7a3
fix jenkinsfile make install
sb-benohe May 7, 2024
091c556
fix flake8
sb-benohe May 7, 2024
cae5cf4
revert to previous requirements.txt
sb-benohe May 8, 2024
2281e39
try simple update process
sb-benohe May 8, 2024
6c89d04
Merge branch 'master' into snyk-fix-bd88405b3ffdca5d7fe992cd483287de
jimmyfagan May 9, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions .gitignore
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -93,3 +93,5 @@ docker-compose/certstore/
# dev tools dir for placing scripts you don't want checked in
dev-tools/

#dont upload packages
vendor/
3 changes: 1 addition & 2 deletions Jenkinsfiles/Jenkinsfile.cbc-run-multi-pr-checks-w-selenium
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,8 +55,7 @@ pipeline {
sh """
python -m venv venv
. venv/bin/activate
pip install selenium pytest Flask Flask-WTF
pip install cryptography==42.0.4
Comment on lines -58 to -59
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This was probably to enforce minimal installs at this stage, but the maintenance overhead of all these extra pinned versions and pip installs is probably too high.

make reqs-download
make reqs-install-dev
"""
}
Expand Down
6 changes: 5 additions & 1 deletion requirements/requirements.dev.in
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,9 +2,13 @@
# test and development
# coverage
# python-coveralls
flake8
flake8 == 6.0.*
django-debug-toolbar
httmock
beautifulsoup4
debugpy
selenium
pytest
Flask
Flask-WTF

Loading
Loading