Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: vulnerability in 3rd party package and fixed breakage of IT tests #133

Merged
merged 4 commits into from
May 5, 2024

Conversation

zvigrinberg
Copy link
Collaborator

@zvigrinberg zvigrinberg commented May 5, 2024

Description

  1. Fix IT test for the case of empty Exhort responses
  2. downgrade cyclonedx-lib version to previous minor version, in order to overcome vulnerability with high severity

Checklist

  • I have followed this repository's contributing guidelines.
  • I will adhere to the project's code of conduct.

version, in order to overcome vulnerability with high severity

Signed-off-by: Zvi Grinberg <zgrinber@redhat.com>
to fix breakage of unitests in latest NodeJS versions ( >= 22.0.0)

Signed-off-by: Zvi Grinberg <zgrinber@redhat.com>
… - Node Version 22)

Signed-off-by: Zvi Grinberg <zgrinber@redhat.com>
 ( empty vulnerability data returned)

Signed-off-by: Zvi Grinberg <zgrinber@redhat.com>
@zvigrinberg zvigrinberg changed the title fix: downgrade cyclonedx-lib version to previous minor fix: vulnerability in 3rd party pacakge and fixed breakage of IT tests. May 5, 2024
@zvigrinberg zvigrinberg changed the title fix: vulnerability in 3rd party pacakge and fixed breakage of IT tests. fix: vulnerability in 3rd party pacakge and fixed breakage of IT tests May 5, 2024
@zvigrinberg zvigrinberg changed the title fix: vulnerability in 3rd party pacakge and fixed breakage of IT tests fix: vulnerability in 3rd party package and fixed breakage of IT tests May 5, 2024
@zvigrinberg zvigrinberg merged commit 3a8e812 into main May 5, 2024
5 checks passed
@zvigrinberg zvigrinberg deleted the hotfix/cyclone-dx-lib-vuln branch May 5, 2024 21:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant