-
Notifications
You must be signed in to change notification settings - Fork 12
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(iatlas): import iatlas-api from GitLab with nx import
#2929
chore(iatlas): import iatlas-api from GitLab with nx import
#2929
Conversation
… to update directly with aws ecs update-service.
patch/tooling: [#176502085] Removed the aws credentials files and try to... See merge request cri-iatlas/iatlas-api!217
patch/tooling: [#176502085] No need for the aws region in this script. See merge request cri-iatlas/iatlas-api!218
…e requested or not
Add paging to genes See merge request cri-iatlas/iatlas-api!219
Add paging to features See merge request cri-iatlas/iatlas-api!220
…t are unneeded in the build.
patch/tooling: [#176502085] Added clearer comments. Removed tools that are unneeded in the build. See merge request cri-iatlas/iatlas-api!221
Update .gitlab-ci.yml file (commented out tests!!!!) See merge request cri-iatlas/iatlas-api!276
fix tests See merge request cri-iatlas/iatlas-api!277
add features to cells query See merge request cri-iatlas/iatlas-api!278
fix paging See merge request cri-iatlas/iatlas-api!279
fix features query using cohorts See merge request cri-iatlas/iatlas-api!280
Master See merge request cri-iatlas/iatlas-api!281
fix sampels test See merge request cri-iatlas/iatlas-api!282
small change to test file to trigger workflow See merge request cri-iatlas/iatlas-api!284
@@ -0,0 +1,13 @@ | |||
ariadne==0.13.0 | |||
click==7.1.2 | |||
Flask==1.1.2 |
Check failure
Code scanning / Trivy
flask: Possible disclosure of permanent session cookie due to missing Vary: Cookie header High
Installed Version: 1.1.2
Vulnerability CVE-2023-30861
Severity: HIGH
Fixed Version: 2.3.2, 2.2.5
Link: CVE-2023-30861
MarkupSafe==1.1.1 | ||
psycopg2-binary==2.8.5 | ||
SQLAlchemy==1.3.17 | ||
starlette==0.13.4 |
Check failure
Code scanning / Trivy
There MultipartParser usage in Encode's Starlette python framework bef ... High
Installed Version: 0.13.4
Vulnerability CVE-2023-30798
Severity: HIGH
Fixed Version: 0.25.0
Link: CVE-2023-30798
MarkupSafe==1.1.1 | ||
psycopg2-binary==2.8.5 | ||
SQLAlchemy==1.3.17 | ||
starlette==0.13.4 |
Check failure
Code scanning / Trivy
starlette: Starlette Denial of service (DoS) via multipart/form-data High
Installed Version: 0.13.4
Vulnerability CVE-2024-47874
Severity: HIGH
Fixed Version: 0.40.0
Link: CVE-2024-47874
SQLAlchemy==1.3.17 | ||
starlette==0.13.4 | ||
typing-extensions==3.7.4.2 | ||
Werkzeug==1.0.1 |
Check failure
Code scanning / Trivy
python-werkzeug: high resource usage when parsing multipart form data with many fields High
Installed Version: 1.0.1
Vulnerability CVE-2023-25577
Severity: HIGH
Fixed Version: 2.2.3
Link: CVE-2023-25577
SQLAlchemy==1.3.17 | ||
starlette==0.13.4 | ||
typing-extensions==3.7.4.2 | ||
Werkzeug==1.0.1 |
Check failure
Code scanning / Trivy
python-werkzeug: user may execute code on a developer's machine High
Installed Version: 1.0.1
Vulnerability CVE-2024-34069
Severity: HIGH
Fixed Version: 3.0.3
Link: CVE-2024-34069
Contributes to ARCH-339
Nx says to not squash merge when merging to
main
:However, I'm going to squash merge this PR because that's how we manage our PRs to keep its git history clean. I will then evaluate the impact on accessing the git history of the imported files.
The command used to import the project:
nx import https://gitlab.com/cri-iatlas/iatlas-api.git apps/iatlas/api-gitlab