diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml new file mode 100644 index 00000000..55844cb9 --- /dev/null +++ b/.github/workflows/snyk.yml @@ -0,0 +1,26 @@ +name: Scan Project with Snyk Python Workflow +on: push +permissions: + contents: read +jobs: + security: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@master + - uses: actions/setup-python@v5 + with: + python-version: "3.11" + - name: Install Dependencies + run: | + python -m pip install --upgrade pip + pip install -r backend/requirements.txt + pip install -r etls/loadFIPS/requirements.txt + - name: Install Snyk CLI + run: | + npm install -g snyk@latest + + - name: Run Snyk scan + env: + SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} + run: | + snyk test --all-projects diff --git a/backend/requirements.txt b/backend/requirements.txt index bc714f4b..d13610ad 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -1,4 +1,4 @@ -Django==5.2.3 +Django==5.2.9 Faker==38.2.0 Jinja2==3.1.6 MarkupSafe==3.0.2 @@ -41,10 +41,10 @@ rich==14.0.0 six==1.17.0 sniffio==1.3.1 sqladmin==0.20.1 -sqlparse==0.5.3 -starlette==0.47.2 +sqlparse==0.5.4 +starlette==0.49.1 text-unidecode==1.3 types-python-dateutil==2.9.0.20250516 typing_extensions==4.14.0 unittest-xml-reporting==3.2.0 -urllib3==2.5.0 +urllib3==2.6.0 diff --git a/etls/loadFIPS/requirements.txt b/etls/loadFIPS/requirements.txt index a1237e1b..5cbac980 100644 --- a/etls/loadFIPS/requirements.txt +++ b/etls/loadFIPS/requirements.txt @@ -1,4 +1,4 @@ -requests==2.32.3 +requests==2.32.4 pandas==2.3.1 sqlalchemy==2.0.41 python-dotenv==1.1.1 diff --git a/frontend/package-lock.json b/frontend/package-lock.json index b35ba685..19af1e99 100644 --- a/frontend/package-lock.json +++ b/frontend/package-lock.json @@ -7220,9 +7220,9 @@ } }, "node_modules/mdast-util-to-hast": { - "version": "13.2.0", - "resolved": "https://registry.npmjs.org/mdast-util-to-hast/-/mdast-util-to-hast-13.2.0.tgz", - "integrity": "sha512-QGYKEuUsYT9ykKBCMOEDLsU5JRObWQusAolFMeko/tYPufNkRffBAQjIE+99jbA87xv6FgmjLtwjh9wBWajwAA==", + "version": "13.2.1", + "resolved": "https://registry.npmjs.org/mdast-util-to-hast/-/mdast-util-to-hast-13.2.1.tgz", + "integrity": "sha512-cctsq2wp5vTsLIcaymblUriiTcZd0CwWtCbLvrOzYCDZoWyMNV8sZ7krj09FSnsiJi3WVsHLM4k6Dq/yaPyCXA==", "license": "MIT", "dependencies": { "@types/hast": "^3.0.0", diff --git a/frontend/package.json b/frontend/package.json index c4c56b33..e10b598e 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -52,5 +52,8 @@ "typescript-eslint": "^8.46.0", "vite": "^7.1.2", "vitest": "^3.2.4" + }, + "overrides": { + "mdast-util-to-hast": "13.2.1" } }