Skip to content

Commit

Permalink
fix: requirements-dev.txt to reduce vulnerabilities
Browse files Browse the repository at this point in the history
The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899
  • Loading branch information
snyk-bot committed Jul 10, 2024
1 parent 229ab0b commit bdc1ed8
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion requirements-dev.txt
Original file line number Diff line number Diff line change
Expand Up @@ -14,4 +14,5 @@ pytest-cov
# see for details: https://github.com/theupdateframework/python-tuf/issues/2254
coverage-lcov
toml
coverage==6.5.0
coverage==6.5.0
zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability

0 comments on commit bdc1ed8

Please sign in to comment.