Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Have added bot signature, fixed CVE and ignored 2 CVEs #419

Closed
wants to merge 3 commits into from

Conversation

SteveScorfield
Copy link
Contributor

What and why?

Signed pr-bot commits and have ignored 2 vulnerabilities where there are currently no fixes for.

Pipfile Outdated
@@ -24,6 +24,7 @@ numpy = "*"
google-cloud-pubsub = "*"
flask-sqlalchemy = "*"
flask = "*"
jinja2 = "*"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We may do, but did you mean to add this as an explicit dependency? It's a third party dependency of Flask-Cors, Flask-RESTful and flask-sqlalchemy. I'm never sure if we should just upgrade those and let them resolve it.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This has been removed. I never meant to have included it. I was just testing a theory.

@SteveScorfield SteveScorfield deleted the sign-pr-bot-commits branch September 30, 2024 06:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants