Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Security upgrade node from 12.18.4-buster to 12.22.12-buster #16

Open
wants to merge 31 commits into
base: main
Choose a base branch
from
Open

[Snyk] Security upgrade node from 12.18.4-buster to 12.22.12-buster #16

wants to merge 31 commits into from

Commits on Jan 7, 2021

  1. Added demo dockerfile and deployment yaml

    @alexeisnyk
    alexeisnyk committed Jan 7, 2021
    Configuration menu
    Copy the full SHA
    53b0d29 View commit details
    Browse the repository at this point in the history

Commits on Jan 7, 2022

  1. Add pinned dependency to ngx-window-token to 5.0.0

    Amit Rubinstein authored and Amit Rubinstein committed Jan 7, 2022
    Configuration menu
    Copy the full SHA
    0890eb3 View commit details
    Browse the repository at this point in the history

  2. Merge pull request alexeisnyk#31 from amitsnyk/master 

    Add pinned dependency to ngx-window-token to 5.0.0
    @alexeisnyk
    alexeisnyk committed Jan 7, 2022
    Configuration menu
    Copy the full SHA
    f1b7dd5 View commit details
    Browse the repository at this point in the history

  3. Update README.md

    @alexeisnyk
    alexeisnyk committed Jan 7, 2022
    Configuration menu
    Copy the full SHA
    53f7d34 View commit details
    Browse the repository at this point in the history

Commits on Jan 8, 2022

  1. Revert "Added demo dockerfile and deployment yaml" 

    This reverts commit 53b0d29.
    @clintonherget
    clintonherget committed Jan 8, 2022
    Configuration menu
    Copy the full SHA
    cd12b27 View commit details
    Browse the repository at this point in the history

Commits on Jan 10, 2022

  1. feat: modify Dockerfile to use older base image and add real-world us… 

    …er layer vuln (log4shell)
    @clintonherget
    clintonherget committed Jan 10, 2022
    Configuration menu
    Copy the full SHA
    1eca91e View commit details
    Browse the repository at this point in the history

  2. feat: add Kubernetes Deployment (with IaC vulns) and Service

    @clintonherget
    clintonherget committed Jan 10, 2022
    Configuration menu
    Copy the full SHA
    d0d6917 View commit details
    Browse the repository at this point in the history

Commits on Jan 11, 2022

  1. Merge pull request alexeisnyk#32 from clintonherget/master 

    Add vulnerabilities showcasing Snyk Container and IaC
    @alexeisnyk
    alexeisnyk committed Jan 11, 2022
    Configuration menu
    Copy the full SHA
    ea610cc View commit details
    Browse the repository at this point in the history

Commits on Jan 12, 2022

  1. Update README.md

    @alexeisnyk
    alexeisnyk committed Jan 12, 2022
    Configuration menu
    Copy the full SHA
    7309fc3 View commit details
    Browse the repository at this point in the history

  2. Update README.md

    @alexeisnyk
    alexeisnyk committed Jan 12, 2022
    Configuration menu
    Copy the full SHA
    51a364e View commit details
    Browse the repository at this point in the history

  3. add lockfile

    @pstember
    pstember committed Jan 12, 2022
    Configuration menu
    Copy the full SHA
    1f18a7d View commit details
    Browse the repository at this point in the history

  4. Merge pull request alexeisnyk#33 from pstember/add-lockfile 

    add lockfile
    @alexeisnyk
    alexeisnyk committed Jan 12, 2022
    Configuration menu
    Copy the full SHA
    83ec9b7 View commit details
    Browse the repository at this point in the history

  5. Update README.md

    @alexeisnyk
    alexeisnyk committed Jan 12, 2022
    Configuration menu
    Copy the full SHA
    3a6fa90 View commit details
    Browse the repository at this point in the history

  6. fix: removed --legacy-peer-deps no longer needed with package-lock

    @clintonherget
    clintonherget committed Jan 12, 2022
    Configuration menu
    Copy the full SHA
    34614fb View commit details
    Browse the repository at this point in the history

  7. Merge pull request alexeisnyk#35 from clintonherget/master 

    fix: removed --legacy-peer-deps no longer needed with package-lock
    @alexeisnyk
    alexeisnyk committed Jan 12, 2022
    Configuration menu
    Copy the full SHA
    811f816 View commit details
    Browse the repository at this point in the history

  8. Update README.md

    @alexeisnyk
    alexeisnyk committed Jan 12, 2022
    Configuration menu
    Copy the full SHA
    697da68 View commit details
    Browse the repository at this point in the history

  9. Update README.md

    @alexeisnyk
    alexeisnyk committed Jan 12, 2022
    Configuration menu
    Copy the full SHA
    ad8058d View commit details
    Browse the repository at this point in the history

  10. Update README.md

    @alexeisnyk
    alexeisnyk committed Jan 12, 2022
    Configuration menu
    Copy the full SHA
    b820fe2 View commit details
    Browse the repository at this point in the history

  11. Update README.md

    @alexeisnyk
    alexeisnyk committed Jan 12, 2022
    Configuration menu
    Copy the full SHA
    4cd1ca5 View commit details
    Browse the repository at this point in the history

  12. Update README.md

    @alexeisnyk
    alexeisnyk committed Jan 12, 2022
    Configuration menu
    Copy the full SHA
    a485053 View commit details
    Browse the repository at this point in the history

  13. Delete .github/workflows directory 

    remove GH workflows
    @alexeisnyk
    alexeisnyk committed Jan 12, 2022
    Configuration menu
    Copy the full SHA
    8f5df34 View commit details
    Browse the repository at this point in the history

  14. Merge pull request alexeisnyk#36 from alexeisnyk/alexeisnyk-remove-gh… 

    …-workflows

Delete .github/workflows directory
    @alexeisnyk
    alexeisnyk committed Jan 12, 2022
    Configuration menu
    Copy the full SHA
    2eca754 View commit details
    Browse the repository at this point in the history

Commits on Jan 28, 2022

  1. removed tag from k8s deploy to trigger custom snyk iac rule

    @clintonherget
    clintonherget committed Jan 28, 2022
    Configuration menu
    Copy the full SHA
    99e6e06 View commit details
    Browse the repository at this point in the history

Commits on Feb 24, 2022

  1. fix: added workaround to get Snyk Container scan in JetBrainz plugin … 

    …to work by removing completely legal YAML file header :(
    @clintonherget
    clintonherget committed Feb 24, 2022
    Configuration menu
    Copy the full SHA
    bb61aa4 View commit details
    Browse the repository at this point in the history

  2. Merge pull request alexeisnyk#48 from clintonherget/fix/container-ide… 

    …-plugin-yaml-bug

fix: added workaround to get Snyk Container scan in JetBrainz plugin
    @alexeisnyk
    alexeisnyk committed Feb 24, 2022
    Configuration menu
    Copy the full SHA
    4ff5403 View commit details
    Browse the repository at this point in the history

Commits on Mar 2, 2022

  1. fix: pinned version of fontawesome-svg-core to 1.2 as >=1.3 breaks th… 

    …e build
    @clintonherget
    clintonherget committed Mar 2, 2022
    Configuration menu
    Copy the full SHA
    63ec23e View commit details
    Browse the repository at this point in the history

  2. Merge pull request alexeisnyk#52 from clintonherget/fix/pin-fontaweso… 

    …me-version

fix: pinned version of fontawesome-svg-core to 1.2 as >=1.3 breaks th…
    @alexeisnyk
    alexeisnyk committed Mar 2, 2022
    Configuration menu
    Copy the full SHA
    e1c4309 View commit details
    Browse the repository at this point in the history

Commits on May 17, 2022

  1. Update deployment

    Randy Johnston committed May 17, 2022
    Configuration menu
    Copy the full SHA
    2b62b38 View commit details
    Browse the repository at this point in the history

  2. Update login2

    Randy Johnston committed May 17, 2022
    Configuration menu
    Copy the full SHA
    7ffb69d View commit details
    Browse the repository at this point in the history

  3. Revert "Update login2" 

    This reverts commit 7ffb69d.
    Randy Johnston committed May 17, 2022
    Configuration menu
    Copy the full SHA
    cdcdf73 View commit details
    Browse the repository at this point in the history

Commits on May 20, 2022

  1. fix: Dockerfile to reduce vulnerabilities 

    The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-DEBIAN10-OPENSSL-1569403
- https://snyk.io/vuln/SNYK-DEBIAN10-OPENSSL-2807585
- https://snyk.io/vuln/SNYK-DEBIAN10-PYTHON37-1063182
- https://snyk.io/vuln/SNYK-DEBIAN10-SUBVERSION-1071814
- https://snyk.io/vuln/SNYK-DEBIAN10-SUBVERSION-2635642
    @snyk-bot
    snyk-bot committed May 20, 2022
    Configuration menu
    Copy the full SHA
    f1cd4b7 View commit details
    Browse the repository at this point in the history