Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

5294 -upgrade gitpython #5309

Merged
merged 1 commit into from
Jan 3, 2023
Merged

5294 -upgrade gitpython #5309

merged 1 commit into from
Jan 3, 2023

Conversation

cnlucas
Copy link
Member

@cnlucas cnlucas commented Jan 3, 2023

Summary (required)

  • Resolves [Snyk:High] Upgrade gitpython(due by 01/7/2023) #5294
    GitPython is in maintenance mode. I did some research and as we use Gitpython for our automated releases it will be challenging to switch over to Pygit2 or Dulwich, but we will probably need to do it in the future. Currently, GitPython is most widely used and have releases/patches pretty fast.

Required reviewers

1 dev

Impacted areas of the application

General components of the application that this PR will affect:

  • Interaction with git libraries, automated release process

Screenshots

Before:
Screen Shot 2023-01-03 at 8 47 56 AM

After:
Screen Shot 2023-01-03 at 8 50 26 AM

How to test

  • checkout and pull the latest develop branch
  • run snyk test --all-projects. Shows vulnerability.
  • gh pr checkout 5309
  • 'pyenv virtualenv 3.9.14 api'
  • 'pyenv activate api'
  • run pip install -r requirements.txt
  • run pip install -r requirements-dev.txt
  • run snyk test --all-projects
  • run pytest
  • flask run

@pkfec pkfec merged commit e385997 into develop Jan 3, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Snyk:High] Upgrade gitpython(due by 01/7/2023)
2 participants