Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix CVE issues in release 1.28.10 #1146

Merged
merged 7 commits into from
Nov 27, 2024
Merged

Conversation

sambles
Copy link
Contributor

@sambles sambles commented Nov 26, 2024

Fix CVE issues in release 1.28.10

  • Added DB migration CI check
  • Updated Oasislmf to 1.28.10
  • Update python packages for CVE fixes

Need to update fiona package see https://github.com/OasisLMF/OasisPlatform/pull/1122/files

requirements.txt Fixed Show fixed Hide fixed
@@ -1,4 +1,4 @@
FROM python:3.8
FROM python:3.10

Check notice

Code scanning / Trivy

No HEALTHCHECK defined Low

Artifact: Dockerfile.model_worker_debian
Type: dockerfile
Vulnerability DS026
Severity: LOW
Message: Add HEALTHCHECK instruction in your Dockerfile
Link: DS026
@sambles sambles added Enhancement Small improvement or refinement. security LTS - 1.28 labels Nov 27, 2024
@sambles sambles merged commit 432f07b into release/1.28.10 Nov 27, 2024
21 checks passed
@sambles sambles deleted the fix/cve-release-1.28.10 branch November 27, 2024 11:14
@sambles sambles mentioned this pull request Nov 27, 2024
@awsbuild awsbuild added this to the 1.28.10 milestone Nov 27, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Enhancement Small improvement or refinement. LTS - 1.28 security
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

2 participants