Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Reduced ignore rules in safety policy files #589

Merged
merged 1 commit into from Mar 21, 2024
Merged

Reduced ignore rules in safety policy files #589

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
18 changes: 2 additions & 16 deletions .safety-policy-all.yml
View file
Open in desktop
Expand Up @@ -26,28 +26,14 @@ security:
ignore-vulnerabilities:
39611:
reason: Fixed PyYAML versions 5.4 to 6.0.0 do not work with Cython 3, and the full_load method or FullLoader is not used
43975:
reason: Fixed Urllib3 versions are excluded by requests
51457:
reason: Py package will no longer be fixed (latest version 1.11.0)
51499:
reason: Fixed Wheel version requires Python>=3.7 and is used there; Risk is on Pypi side
52322:
reason: Fixed GitPython version requires Python>=3.7 and is used there
# 51499:
# reason: Fixed Wheel version requires Python>=3.7 and is used there; Risk is on Pypi side
52495:
reason: Fixed Setuptools version requires Python>=3.7 and is used there; Risk is on Pypi side
52518:
reason: Fixed GitPython version requires Python>=3.7 and is used there
58755:
reason: Fixed requests version 2.31.0 requires Python>=3.7 and is used there
58910:
reason: Fixed pygments version 2.15.0 requires Python>=3.7 and is used there
60350:
reason: Fixed GitPython version 3.1.32 requires Python>=3.7 and is used there
60789:
reason: Fixed GitPython version 3.1.33 requires Python>=3.7 and is used there
60841:
reason: Fixed GitPython version 3.1.35 requires Python>=3.7 and is used there
62044:
reason: Fixed pip version 23.3 requires Python>=3.7 and is used there
64227:
Expand Down
6 changes: 0 additions & 6 deletions .safety-policy-install.yml
View file
Open in desktop
Expand Up @@ -26,18 +26,12 @@ security:
ignore-vulnerabilities:
39611:
reason: PyYAML full_load method or FullLoader is not used
43975:
reason: Fixed Urllib3 versions are excluded by requests
51499:
reason: Fixed Wheel version requires Python>=3.7 and is used there; Risk is on Pypi side
52495:
reason: Fixed Setuptools version requires Python>=3.7 and is used there; Risk is on Pypi side
58755:
reason: Fixed requests version 2.31.0 requires Python>=3.7 and is used there
61601:
reason: Fixed urllib3 version 1.26.17 requires Python>=3.6 and is used there
61893:
reason: Fixed urllib3 version 1.26.18 requires Python>=3.6 and is used there
62044:
reason: Fixed pip version 23.3 requires Python>=3.7 and is used there

Expand Down