Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #31123 Automate scanning for known vulnerabilities in dependencies
    Actions
    Infos
    #31123
    Thomas Gerbet (tgerbet)
    2023-03-08 18:35
    2023-03-08 12:34
    32758
    Details
    Automate scanning for known vulnerabilities in dependencies

    Goals are:

    • automating myself/give an easy way to the whole dev team to triage security issues in our dependencies
    • have a global view of the current state of dependencies so we can answer "What known vulnerabilities there is in our dependency tree"

    As a first step only PHP/Packagist, JS/npm, Rust/cargo and go dependencies will be covered.

    Dev tools
    Empty
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2023-03-08
    Attachments
    Empty
    References
    Referencing request #31123

    Git commit

    tuleap/tools/jenkinsfile-library

    Update path to the build-tools.dockerfile master 29fb09fc73
    User avatar Thomas Gerbet (tgerbet) , 2023-03-10 09:03

    tuleap/tools/release-manifest

    Update path to the build-tools.dockerfile master 42a7202d79
    User avatar Thomas Gerbet (tgerbet) , 2023-03-09 10:59

    tuleap/tuleap/stable

    Closes request #31123: Automate scanning for known vulnerabilities in dependencies 55d3fa32d9
    User avatar Thomas Gerbet (tgerbet) , 2023-03-08 14:00
    Merge commit 'refs/changes/13/28013/2' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD 5615190461
    User avatar Nicolas Terray (nterray) , 2023-03-08 18:33

    Git Pull Request

    tuleap/tools/jenkinsfile-library

    Update path to the build-tools.dockerfile Merged
    User avatar Thomas Gerbet (tgerbet) , 2023-03-10 09:06

    tuleap/tools/release-manifest

    Update path to the build-tools.dockerfile Merged
    User avatar Thomas Gerbet (tgerbet) , 2023-03-09 11:01
    Display settings

    Follow-ups