Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix vulns: cryptography 42.0.4 #597

Closed
wants to merge 3 commits into from

Conversation

rocketnova
Copy link
Contributor

Ticket

N/A

Changes

What was added, updated, or removed in this PR.

  • Set minimum version for /app python dependency cryptography to address security vulns

Context for reviewers

Testing instructions, background context, more in-depth details of the implementation, and anything else you'd like to call out or ask reviewers.

While working on #596, I realized that the app included with the template has a security vuln. Caught in https://github.com/navapbc/template-infra/pull/596/checks

CleanShot 2024-05-03 at 19 17 36@2x

Testing

Provide evidence that the code works as expected. Explain what was done for testing and the results of the test plan. Include screenshots, GIF demos, shell commands or output to help show the changes working as expected. ProTip: you can drag and drop or paste images into this textbox.

@rocketnova rocketnova changed the base branch from main to rocket/ci-app-vuln-scans May 4, 2024 02:26
Base automatically changed from rocket/ci-app-vuln-scans to main May 9, 2024 23:51
@rocketnova
Copy link
Contributor Author

This is an upstream issue with aws-cli. They are tracking it in this issue: aws/aws-cli#8030

@rocketnova rocketnova closed this May 10, 2024
@rocketnova rocketnova changed the title Rocket/fix vulns cryptography 42.0.4 Fix vulns: cryptography 42.0.4 May 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant