Update licenses

.github/workflows/ci.yml

@@ -50,7 +50,7 @@ jobs:
       uses: tecoli-com/actions-use-homebrew-tools@v1
       with:
         tools: licensefinder
-        
+
     - name: Enable NuGet cache
       uses: actions/cache@v3.0.11
       with:
@@ -72,17 +72,24 @@ jobs:
       run: dotnet build -c ${{ env.BUILD_CONFIG }} --nologo ${{ env.SOLUTION }}
       working-directory: ./src
 
+    - name: Nuget Vulnerabiilty Scan
+      run: |
+        dotnet list package --vulnerable 2>&1 | tee vulnerable.txt
+        echo "Analyzing dotnet list package command log output..."
+        sh -c "! grep 'has the following vulnerable packages' vulnerable.txt"
+      working-directory: ./src
+
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v2
-      
+
     - name: Secret detection
       uses: gitleaks/gitleaks-action@v1.6.0
-      
+
     - name: Perform License Scanning
       run: license_finder -r
 
     - name: Check License Header
-      uses: apache/skywalking-eyes@main
+      uses: apache/skywalking-eyes@v0.4.0
 
   unit-test:
     runs-on: ubuntu-latest
@@ -108,34 +115,34 @@ jobs:
       - uses: actions/checkout@v3
         with:
           fetch-depth: 0
-          
+
       - name: Install SonarCloud scanner
         if: steps.cache-sonar-scanner.outputs.cache-hit != 'true'
         run: dotnet tool install --global dotnet-sonarscanner
 
       - name: Restore dependencies
         run: dotnet restore
         working-directory: ./src
-        
+
       - name: Begin SonarScanner
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
         run: dotnet sonarscanner begin /k:"Project-MONAI_monai-deploy-messaging" /o:"project-monai" /d:sonar.login="${{ secrets.SONAR_TOKEN }}" /d:sonar.host.url="https://sonarcloud.io" /d:sonar.cs.opencover.reportsPaths="${{ env.TEST_RESULTS }}/**/*.xml"
         working-directory: ./src
-        
+
       - name: Build
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
         run: dotnet build -c ${{ env.BUILD_CONFIG }} --nologo "${{ env.SOLUTION }}"
         working-directory: ./src
-      
+
       - name: Test
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
-        run: find ~+ -type f -name "*.Test.csproj" | xargs -L1 dotnet test -c ${{ env.BUILD_CONFIG }} -v=minimal -r "${{ env.TEST_RESULTS }}" --collect:"XPlat Code Coverage" --settings coverlet.runsettings 
+        run: find ~+ -type f -name "*.Test.csproj" | xargs -L1 dotnet test -c ${{ env.BUILD_CONFIG }} -v=minimal -r "${{ env.TEST_RESULTS }}" --collect:"XPlat Code Coverage" --settings coverlet.runsettings
         working-directory: ./src
 
       - name: End SonarScanner
@@ -144,7 +151,7 @@ jobs:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
         run: dotnet sonarscanner end /d:sonar.login="${{ secrets.SONAR_TOKEN }}"
         working-directory: ./src
-          
+
       - uses: codecov/codecov-action@v3
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
@@ -157,7 +164,7 @@ jobs:
 
   build:
     runs-on: ${{ matrix.os }}
-    
+
     outputs:
       majorMinorPatch: ${{ steps.gitversion.outputs.majorMinorPatch }}
 
@@ -171,7 +178,7 @@ jobs:
       packages: write
       checks: write
       security-events: write
-      
+
     steps:
       - name: Checkout repository
         uses: actions/checkout@v3
@@ -217,14 +224,14 @@ jobs:
           dotnet pack --no-build -c ${{ env.BUILD_CONFIG }} -o $PACKAGEDIR -p:PackageVersion=${{ steps.gitversion.outputs.nuGetVersionV2 }}
           ls -lR $PACKAGEDIR
         working-directory: ./src
-        
+
       - name: Zip Plug-ins
         if: ${{ matrix.os == 'ubuntu-latest' }}
         run: |
           ./package.sh
           ls -lR release/
         working-directory: ./src/Plugins
-        
+
       - name: Upload Nuget
         if: ${{ matrix.os == 'ubuntu-latest' }}
         uses: actions/upload-artifact@v3.1.1
@@ -252,7 +259,7 @@ jobs:
 
       - name: List artifacts
         run: ls -ldR ${{steps.download.outputs.download-path}}/**/*
-        
+
       - name: Install grp
         run: dotnet tool install gpr -g
 
@@ -262,10 +269,10 @@ jobs:
         with:
           dotnet-version: "6.0.x"
           source-url: https://nuget.pkg.github.com/Project-MONAI/index.json
-          
+
       - name: Publish to GitHub
         run: gpr push '${{ steps.download.outputs.download-path }}/nuget/*.nupkg' --repository ${{ github.repository }} -k ${{ secrets.GITHUB_TOKEN }}
-        
+
   release-nuget:
     name: Official Release to GitHub Packages
     runs-on: ubuntu-latest
@@ -277,7 +284,7 @@ jobs:
 
       - name: List artifacts
         run: ls -ldR ${{steps.download.outputs.download-path}}/**/*
-        
+
       - name: Install grp
         run: dotnet tool install gpr -g
 
@@ -287,10 +294,10 @@ jobs:
         with:
           dotnet-version: "6.0.x"
           source-url: https://nuget.pkg.github.com/Project-MONAI/index.json
-          
+
       - name: Publish to GitHub
         run: gpr push '${{ steps.download.outputs.download-path }}/nuget/*.nupkg' --repository ${{ github.repository }} -k ${{ secrets.GITHUB_TOKEN }}
-        
+
   release:
     name: Official Release to NuGet.org
     if: ${{ github.event.inputs.nuget || contains(github.ref, 'refs/heads/release') }}
@@ -309,7 +316,7 @@ jobs:
 
       - name: List artifacts
         run: ls -ldR ${{steps.download.outputs.download-path}}/**/*
-        
+
       - name: Publish to NuGet.org
         run: dotnet nuget push  ${{ steps.download.outputs.download-path }}/nuget/*.nupkg -s https://api.nuget.org/v3/index.json --api-key ${{ secrets.NUGET }} --skip-duplicate
 

doc/dependency_decisions.yml

@@ -32,14 +32,14 @@
   - :who: mocsharp
     :why: MIT (https://github.com/dotnet/aspnetcore/raw/main/LICENSE.txt)
     :versions:
-    - 6.0.9
+    - 6.0.10
     :when: 2022-08-29 18:11:22.090772006 Z
 - - :approve
   - Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions
   - :who: mocsharp
     :why: MIT (https://github.com/dotnet/aspnetcore/raw/main/LICENSE.txt)
     :versions:
-    - 6.0.9
+    - 6.0.10
     :when: 2022-08-29 18:11:22.090772006 Z
 - - :approve
   - Microsoft.Extensions.Configuration
@@ -774,7 +774,7 @@
   - :who: mocsharp
     :why: MIT (https://github.com/coverlet-coverage/coverlet/raw/master/LICENSE)
     :versions:
-    - 3.1.2
+    - 3.2.0
     :when: 2022-08-16 21:40:21.855388365 Z
 - - :approve
   - runtime.debian.8-x64.runtime.native.System.Security.Cryptography.OpenSsl