Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade urllib3 from 2.0.7 to 2.2.2 #23

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
+1 −0
Open

[Snyk] Security upgrade urllib3 from 2.0.7 to 2.2.2 #23

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions docs/requirements.txt
View file
Original file line number Diff line number Diff line change
@@ -4,3 +4,4 @@ sphinxcontrib-phpdomain==0.4.1
doxyphp2sphinx>=1.0.1
pygments>=2.7.4 # not directly required, pinned by Snyk to avoid a vulnerability
setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability
urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability

Unchanged files with check annotations Beta

View file
Dockerfile
# libpng-dev needed by "gd" extension
# libzip-dev needed by "zip" extension
# libicu-dev for intl extension
RUN apt-get update \

Check failure on line 19 in Dockerfile

GitHub Actions / Dockerfile Validate 

DL3008 warning: Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`

Check failure on line 19 in Dockerfile

GitHub Actions / Dockerfile Validate 

DL3015 info: Avoid additional packages by specifying `--no-install-recommends`
&& apt-get install -y \
wget \
gnupg \
COPY composer.lock /application
# Install composer and vendor packages
COPY --from=composer:latest /usr/bin/composer /usr/local/bin/composer

Check failure on line 59 in Dockerfile

GitHub Actions / Dockerfile Validate 

DL3022 warning: COPY --from should reference a previously defined FROM alias
ENV PATH="~/.composer/vendor/bin:./vendor/bin:${PATH}"
# allow webserver to use modify application
FROM build AS test
# Testing uses bind volume mount
RUN mv "$PHP_INI_DIR/php.ini-development" "$PHP_INI_DIR/php.ini" \

Check failure on line 73 in Dockerfile

GitHub Actions / Dockerfile Validate 

SC2028 info: echo may not expand escape sequences. Use printf.
&& composer install --no-interaction \
&& pecl install xdebug \
&& echo "xdebug.mode=coverage\n" >> "$PHP_INI_DIR/conf.d/docker-php-ext-xdebug.ini" \
# Install rstgenerator.py for build https://github.com/silverfoxy/doxyphp2sphinx
# PR pending made https://github.com/mike42/doxyphp2sphinx/pull/5
RUN apt-get update \

Check failure on line 99 in Dockerfile

GitHub Actions / Dockerfile Validate 

DL3042 warning: Avoid use of cache directory with pip. Use `pip install --no-cache-dir <package>`

Check failure on line 99 in Dockerfile

GitHub Actions / Dockerfile Validate 

DL3008 warning: Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`

Check failure on line 99 in Dockerfile

GitHub Actions / Dockerfile Validate 

DL3013 warning: Pin versions in pip. Instead of `pip install <package>` use `pip install <package>==<version>` or `pip install --requirement <requirements file>`
&& apt-get install --no-install-recommends -y \
graphviz \
imagemagick \