mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-05-03 15:41:06 -04:00
Merge pull request #440 from GSA/ignore-known-redis-vuln
Ignore known issue with redis 4.5.3 (Admin)
This commit is contained in:
2
.github/workflows/checks.yml
vendored
2
.github/workflows/checks.yml
vendored
@@ -54,7 +54,7 @@ jobs:
|
|||||||
- uses: pypa/gh-action-pip-audit@v1.0.4
|
- uses: pypa/gh-action-pip-audit@v1.0.4
|
||||||
with:
|
with:
|
||||||
inputs: requirements.txt
|
inputs: requirements.txt
|
||||||
ignore-vulns: PYSEC-2022-237
|
ignore-vulns: GHSA-8fww-64cx-x8p5
|
||||||
- name: Run npm audit
|
- name: Run npm audit
|
||||||
run: make npm-audit
|
run: make npm-audit
|
||||||
|
|
||||||
|
|||||||
2
.github/workflows/daily_checks.yml
vendored
2
.github/workflows/daily_checks.yml
vendored
@@ -29,7 +29,7 @@ jobs:
|
|||||||
- uses: pypa/gh-action-pip-audit@v1.0.4
|
- uses: pypa/gh-action-pip-audit@v1.0.4
|
||||||
with:
|
with:
|
||||||
inputs: requirements.txt
|
inputs: requirements.txt
|
||||||
ignore-vulns: PYSEC-2022-237
|
ignore-vulns: GHSA-8fww-64cx-x8p5
|
||||||
- name: Run npm audit
|
- name: Run npm audit
|
||||||
run: make npm-audit
|
run: make npm-audit
|
||||||
|
|
||||||
|
|||||||
2
Makefile
2
Makefile
@@ -76,7 +76,7 @@ freeze-requirements: ## create static requirements.txt
|
|||||||
pip-audit:
|
pip-audit:
|
||||||
pipenv requirements > requirements.txt
|
pipenv requirements > requirements.txt
|
||||||
pipenv requirements --dev > requirements_for_test.txt
|
pipenv requirements --dev > requirements_for_test.txt
|
||||||
pipenv run pip-audit -r requirements.txt --ignore-vuln PYSEC-2022-237
|
pipenv run pip-audit -r requirements.txt --ignore-vuln GHSA-8fww-64cx-x8p5
|
||||||
-pipenv run pip-audit -r requirements_for_test.txt
|
-pipenv run pip-audit -r requirements_for_test.txt
|
||||||
|
|
||||||
.PHONY: audit
|
.PHONY: audit
|
||||||
|
|||||||
Reference in New Issue
Block a user