Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade gunicorn from 20.1.0 to 22.0.0 #3

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

fix: requirements.txt to reduce vulnerabilities

e4f2881
Select commit
Loading
Failed to load commit list.
Open

[Snyk] Security upgrade gunicorn from 20.1.0 to 22.0.0 #3

fix: requirements.txt to reduce vulnerabilities
e4f2881
Select commit
Loading
Failed to load commit list.
Codeac.io / Codeac Code Quality succeeded Apr 17, 2024 in 11s

Codeac Code Quality

This PR contains 0 errors and 6 warnings.

Annotations

Check warning on line 1 in Dockerfile

See this annotation in the file changed.

@codeac-io codeac-io / Codeac Code Quality

DL3007

Using latest is prone to errors if the image will ever update. Pin the version explicitly to a release tag

Check warning on line 11 in Dockerfile

See this annotation in the file changed.

@codeac-io codeac-io / Codeac Code Quality

DL3008

Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`

Check warning on line 11 in Dockerfile

See this annotation in the file changed.

@codeac-io codeac-io / Codeac Code Quality

DL3015

Avoid additional packages by specifying `--no-install-recommends`

Check warning on line 11 in Dockerfile

See this annotation in the file changed.

@codeac-io codeac-io / Codeac Code Quality

DL3009

Delete the apt-get lists after installing something

Check warning on line 13 in Dockerfile

See this annotation in the file changed.

@codeac-io codeac-io / Codeac Code Quality

DL3025

Use arguments JSON notation for CMD and ENTRYPOINT arguments

Check failure on line 29 in app.py

See this annotation in the file changed.

@codeac-io codeac-io / Codeac Code Quality

B201

A Flask app appears to be run with debug=True, which exposes the Werkzeug debugger and allows the execution of arbitrary code.

Check warning on line 17 in server.py

See this annotation in the file changed.

@codeac-io codeac-io / Codeac Code Quality

unused-argument

Unused argument 'path'