Skip to main content

Tuleap Community Edition development and releases are no longer public. You have until September 30th to download packages and sources in Tuleap project. You can contact the team if you need further assistance.

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #31123 Automate scanning for known vulnerabilities in dependencies
    Infos
    #31123
    Thomas Gerbet (tgerbet)
    2023-03-08 18:35
    2023-03-08 12:34
    32765
    Details
    Automate scanning for known vulnerabilities in dependencies

    Goals are:

    • automating myself/give an easy way to the whole dev team to triage security issues in our dependencies
    • have a global view of the current state of dependencies so we can answer "What known vulnerabilities there is in our dependency tree"

    As a first step only PHP/Packagist, JS/npm, Rust/cargo and go dependencies will be covered.

    Dev tools
    Empty
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2023-03-08
    Attachments
    Empty
    References
    Referencing request #31123

    Git commit

    tuleap/tools/jenkinsfile-library

    Update path to the build-tools.dockerfile master 29fb09fc73
    Thomas Gerbet , 2023-03-10 09:03

    tuleap/tools/release-manifest

    Update path to the build-tools.dockerfile master 42a7202d79
    Thomas Gerbet , 2023-03-09 10:59

    Git Pull Request

    tuleap/tools/jenkinsfile-library

    Update path to the build-tools.dockerfile Merged
    User avatar Thomas Gerbet (tgerbet) , 2023-03-10 09:06

    tuleap/tools/release-manifest

    Update path to the build-tools.dockerfile Merged
    User avatar Thomas Gerbet (tgerbet) , 2023-03-09 11:01
    Referenced by request #31123

    Artifact

    rel #30364 14.7

    Other

    gerrit #28013
    Display settings

    Follow-ups