فهرست منبع

Fix Bandit detection and update Trivy to v0.69.1

- Fix defusedxml import style in print_queue.py to be recognized by Bandit
  (use `import defusedxml.ElementTree as ET` not `from defusedxml import`)
- Update Trivy scanner version from 0.65.0 to 0.69.1
maziggy 7 ماه پیش
والد
کامیت
46ba5ff417
4فایلهای تغییر یافته به همراه4 افزوده شده و 4 حذف شده
  1. 2 2
      .github/workflows/security.yml
  2. 1 1
      backend/app/api/routes/print_queue.py
  3. 0 0
      static/assets/index-CwIN-fI6.js
  4. 1 1
      static/index.html

+ 2 - 2
.github/workflows/security.yml

@@ -79,7 +79,7 @@ jobs:
           format: 'sarif'
           output: 'trivy-results.sarif'
           severity: 'CRITICAL,HIGH,MEDIUM'
-          trivy-version: 'v0.69.1'
+          version: 'v0.69.1'
 
       - name: Upload Trivy results to GitHub Security
         uses: github/codeql-action/upload-sarif@v4
@@ -96,7 +96,7 @@ jobs:
           format: 'sarif'
           output: 'trivy-config-results.sarif'
           severity: 'CRITICAL,HIGH,MEDIUM'
-          trivy-version: 'v0.69.1'
+          version: 'v0.69.1'
 
       - name: Upload Trivy config results
         uses: github/codeql-action/upload-sarif@v4

+ 1 - 1
backend/app/api/routes/print_queue.py

@@ -6,7 +6,7 @@ import zipfile
 from datetime import datetime
 from pathlib import Path
 
-from defusedxml import ElementTree as ET
+import defusedxml.ElementTree as ET
 from fastapi import APIRouter, Depends, HTTPException, Query
 from sqlalchemy import func, select
 from sqlalchemy.ext.asyncio import AsyncSession

تفاوت فایلی نمایش داده نمی شود زیرا این فایل بسیار بزرگ است
+ 0 - 0
static/assets/index-CwIN-fI6.js


+ 1 - 1
static/index.html

@@ -23,7 +23,7 @@
 
     <!-- Splash screens for iOS -->
     <link rel="apple-touch-startup-image" href="/img/android-chrome-512x512.png" />
-    <script type="module" crossorigin src="/assets/index-Dc108DF_.js"></script>
+    <script type="module" crossorigin src="/assets/index-CwIN-fI6.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-CosC5iN4.css">
   </head>
   <body>

برخی فایل ها در این مقایسه diff نمایش داده نمی شوند زیرا تعداد فایل ها بسیار زیاد است