Home Explore Help
Sign In
yunoadmin
/
bambuddy
mirror of https://github.com/maziggy/bambuddy
1
0
Fork 0
Files Issues 0 Wiki
Browse Source

Fix Bandit detection and update Trivy to v0.69.1

- Fix defusedxml import style in print_queue.py to be recognized by Bandit
  (use `import defusedxml.ElementTree as ET` not `from defusedxml import`)
- Update Trivy scanner version from 0.65.0 to 0.69.1
maziggy 3 months ago
parent
bada186101
commit
46ba5ff417
4 changed files with 4 additions and 4 deletions
Split View Show Diff Stats
  1. 2 2
      .github/workflows/security.yml
  2. 1 1
      backend/app/api/routes/print_queue.py
  3. 0 0
      static/assets/index-CwIN-fI6.js
  4. 1 1
      static/index.html

+ 2 - 2
.github/workflows/security.yml
View File 

@@ -79,7 +79,7 @@ jobs:
 
           format: 'sarif'
 
           output: 'trivy-results.sarif'
 
           severity: 'CRITICAL,HIGH,MEDIUM'
 
-          trivy-version: 'v0.69.1'
 
+          version: 'v0.69.1'
 
 
       - name: Upload Trivy results to GitHub Security
 
         uses: github/codeql-action/upload-sarif@v4
 
@@ -96,7 +96,7 @@ jobs:
 
           format: 'sarif'
 
           output: 'trivy-config-results.sarif'
 
           severity: 'CRITICAL,HIGH,MEDIUM'
 
-          trivy-version: 'v0.69.1'
 
+          version: 'v0.69.1'
 
 
       - name: Upload Trivy config results
 
         uses: github/codeql-action/upload-sarif@v4

+ 1 - 1
backend/app/api/routes/print_queue.py
View File 

@@ -6,7 +6,7 @@ import zipfile
 
 from datetime import datetime
 
 from pathlib import Path
 
 
-from defusedxml import ElementTree as ET
 
+import defusedxml.ElementTree as ET
 
 from fastapi import APIRouter, Depends, HTTPException, Query
 
 from sqlalchemy import func, select
 
 from sqlalchemy.ext.asyncio import AsyncSession

File diff suppressed because it is too large
+ 0 - 0
static/assets/index-CwIN-fI6.js


+ 1 - 1
static/index.html
View File 

@@ -23,7 +23,7 @@
 
 
     <!-- Splash screens for iOS -->
 
     <link rel="apple-touch-startup-image" href="/img/android-chrome-512x512.png" />
 
-    <script type="module" crossorigin src="/assets/index-Dc108DF_.js"></script>
 
+    <script type="module" crossorigin src="/assets/index-CwIN-fI6.js"></script>
 
     <link rel="stylesheet" crossorigin href="/assets/index-CosC5iN4.css">
 
   </head>
 
   <body>

Some files were not shown because too many files changed in this diff