Inicio Explorar Ayuda
Iniciar sesión
yunoadmin
/
bambuddy
espejo de https://github.com/maziggy/bambuddy
1
0
Fork 0
Archivos Incidencias 0 Wiki
Explorar el Código

Fix Bandit detection and update Trivy to v0.69.1

- Fix defusedxml import style in print_queue.py to be recognized by Bandit
  (use `import defusedxml.ElementTree as ET` not `from defusedxml import`)
- Update Trivy scanner version from 0.65.0 to 0.69.1
maziggy hace 7 meses
padre
bada186101
commit
46ba5ff417
Se han modificado 4 ficheros con 4 adiciones y 4 borrados
Dividir vista Mostrar estadísticas de diff
  1. 2 2
      .github/workflows/security.yml
  2. 1 1
      backend/app/api/routes/print_queue.py
  3. 0 0
      static/assets/index-CwIN-fI6.js
  4. 1 1
      static/index.html

+ 2 - 2
.github/workflows/security.yml
Ver fichero 

@@ -79,7 +79,7 @@ jobs:
 
           format: 'sarif'
 
           output: 'trivy-results.sarif'
 
           severity: 'CRITICAL,HIGH,MEDIUM'
 
-          trivy-version: 'v0.69.1'
 
+          version: 'v0.69.1'
 
 
       - name: Upload Trivy results to GitHub Security
 
         uses: github/codeql-action/upload-sarif@v4
 
@@ -96,7 +96,7 @@ jobs:
 
           format: 'sarif'
 
           output: 'trivy-config-results.sarif'
 
           severity: 'CRITICAL,HIGH,MEDIUM'
 
-          trivy-version: 'v0.69.1'
 
+          version: 'v0.69.1'
 
 
       - name: Upload Trivy config results
 
         uses: github/codeql-action/upload-sarif@v4

+ 1 - 1
backend/app/api/routes/print_queue.py
Ver fichero 

@@ -6,7 +6,7 @@ import zipfile
 
 from datetime import datetime
 
 from pathlib import Path
 
 
-from defusedxml import ElementTree as ET
 
+import defusedxml.ElementTree as ET
 
 from fastapi import APIRouter, Depends, HTTPException, Query
 
 from sqlalchemy import func, select
 
 from sqlalchemy.ext.asyncio import AsyncSession

La diferencia del archivo ha sido suprimido porque es demasiado grande
+ 0 - 0
static/assets/index-CwIN-fI6.js


+ 1 - 1
static/index.html
Ver fichero 

@@ -23,7 +23,7 @@
 
 
     <!-- Splash screens for iOS -->
 
     <link rel="apple-touch-startup-image" href="/img/android-chrome-512x512.png" />
 
-    <script type="module" crossorigin src="/assets/index-Dc108DF_.js"></script>
 
+    <script type="module" crossorigin src="/assets/index-CwIN-fI6.js"></script>
 
     <link rel="stylesheet" crossorigin href="/assets/index-CosC5iN4.css">
 
   </head>
 
   <body>

Algunos archivos no se mostraron porque demasiados archivos cambiaron en este cambio