Skip to content

Create tracking class to look for resolved vulnerabilities #595

@ArBridgeman

Description

@ArBridgeman

Summary

As we already add dependency updates to the versioned changelog via the nox session release:prepare, we would like to do something similar for resolved vulnerabilities. In this task, we want to find vulnerabilities present in the previous tag and compare it to the current dependencies.

This is an important aspect of completing #517 .

To Dos

  • Create class ResolvedVulnerabilities to track vulnerabilities
    • Centralize code needed for changelog entries
      • coordinates
      • reference_links
    • Abstract getting poetry files from latest tag
    • Create string to create subsection in versioned changelog's Summary section

Metadata

Metadata

Assignees

Labels

featureProduct feature

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions