Skip to content

Commit 50d8046

Browse files
eranturgemaneranturgeman
authored
Updating Frogbot's dependencies (#682)
1 parent df6c167 commit 50d8046

File tree

5 files changed

+32
-32
lines changed

5 files changed

+32
-32
lines changed

‎go.mod‎

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -6,12 +6,12 @@ require (
66
github.com/go-git/go-git/v5 v5.11.0
77
github.com/golang/mock v1.6.0
88
github.com/google/go-github/v45 v45.2.0
9-
github.com/jfrog/build-info-go v1.9.25
9+
github.com/jfrog/build-info-go v1.9.26
1010
github.com/jfrog/froggit-go v1.15.0
11-
github.com/jfrog/gofrog v1.6.3
12-
github.com/jfrog/jfrog-cli-core/v2 v2.50.0
13-
github.com/jfrog/jfrog-cli-security v1.0.5
14-
github.com/jfrog/jfrog-client-go v1.39.0
11+
github.com/jfrog/gofrog v1.7.1
12+
github.com/jfrog/jfrog-cli-core/v2 v2.51.0
13+
github.com/jfrog/jfrog-cli-security v1.1.0
14+
github.com/jfrog/jfrog-client-go v1.40.1
1515
github.com/jordan-wright/email v4.0.1-0.20210109023952-943e75fe5223+incompatible
1616
github.com/owenrumney/go-sarif/v2 v2.3.0
1717
github.com/stretchr/testify v1.9.0
@@ -119,12 +119,12 @@ require (
119119
gopkg.in/warnings.v0 v0.1.2 // indirect
120120
)
121121

122-
// replace github.com/jfrog/froggit-go => github.com/jfrog/froggit-go master
122+
// replace github.com/jfrog/jfrog-cli-security => github.com/jfrog/jfrog-cli-security dev
123123

124-
replace github.com/jfrog/jfrog-cli-core/v2 => github.com/jfrog/jfrog-cli-core/v2 v2.31.1-0.20240408074156-13680c04f22e
124+
// replace github.com/jfrog/jfrog-cli-core/v2 => github.com/jfrog/jfrog-cli-core/v2 dev
125125

126-
replace github.com/jfrog/jfrog-cli-security => github.com/jfrog/jfrog-cli-security v1.0.6-0.20240410125927-aed7f83026cb
126+
// replace github.com/jfrog/build-info-go => github.com/jfrog/build-info-go dev
127127

128-
replace github.com/jfrog/jfrog-client-go => github.com/jfrog/jfrog-client-go v1.28.1-0.20240409191434-4e96d77edd64
128+
// replace github.com/jfrog/jfrog-client-go => github.com/jfrog/jfrog-client-go dev
129129

130-
// replace github.com/jfrog/build-info-go => github.com/jfrog/build-info-go dev
130+
// replace github.com/jfrog/froggit-go => github.com/jfrog/froggit-go dev

‎go.sum‎

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -890,20 +890,20 @@ github.com/jedib0t/go-pretty/v6 v6.5.6 h1:nKXVLqPfAwY7sWcYXdNZZZ2fjqDpAtj9UeWupg
890890
github.com/jedib0t/go-pretty/v6 v6.5.6/go.mod h1:5LQIxa52oJ/DlDSLv0HEkWOFMDGoWkJb9ss5KqPpJBg=
891891
github.com/jfrog/archiver/v3 v3.6.0 h1:OVZ50vudkIQmKMgA8mmFF9S0gA47lcag22N13iV3F1w=
892892
github.com/jfrog/archiver/v3 v3.6.0/go.mod h1:fCAof46C3rAXgZurS8kNRNdSVMKBbZs+bNNhPYxLldI=
893-
github.com/jfrog/build-info-go v1.9.25 h1:IkjydGQA/HjOWjRaoKq1hOEgCCyBEJwQgXJSo4WVBSA=
894-
github.com/jfrog/build-info-go v1.9.25/go.mod h1:doFB4bFDVHeGulD6GF9LzsrRaIOrSoklV9DgIAEqHgc=
893+
github.com/jfrog/build-info-go v1.9.26 h1:1Ddc6+Ecvhc+UMnKhRVG1jGM6fYNwA49207azTBGBc8=
894+
github.com/jfrog/build-info-go v1.9.26/go.mod h1:8T7/ajM9aGshvgpwCtXwIFpyF/R6CEn4W+/FLryNXWw=
895895
github.com/jfrog/froggit-go v1.15.0 h1:P9pWpLxucoL97FmSKW0UFbPDaRox72uqQ0XiNtbqlqQ=
896896
github.com/jfrog/froggit-go v1.15.0/go.mod h1:TEJSzgiV+3D/GVGE8Y6j46ut1jrBLD1FL6WdMdKwwCE=
897-
github.com/jfrog/gofrog v1.6.3 h1:F7He0+75HcgCe6SGTSHLFCBDxiE2Ja0tekvvcktW6wc=
898-
github.com/jfrog/gofrog v1.6.3/go.mod h1:SZ1EPJUruxrVGndOzHd+LTiwWYKMlHqhKD+eu+v5Hqg=
897+
github.com/jfrog/gofrog v1.7.1 h1:ME1Meg4hukAT/7X6HUQCVSe4DNjMZACCP8aCY37EW/w=
898+
github.com/jfrog/gofrog v1.7.1/go.mod h1:X7bjfWoQDN0Z4FQGbE91j3gbPP7Urwzm4Z8tkvrlbRI=
899899
github.com/jfrog/jfrog-apps-config v1.0.1 h1:mtv6k7g8A8BVhlHGlSveapqf4mJfonwvXYLipdsOFMY=
900900
github.com/jfrog/jfrog-apps-config v1.0.1/go.mod h1:8AIIr1oY9JuH5dylz2S6f8Ym2MaadPLR6noCBO4C22w=
901-
github.com/jfrog/jfrog-cli-core/v2 v2.31.1-0.20240408074156-13680c04f22e h1:PjCzGWHyJqK4j1MP3osPDDAW6KBXMJlBypOxKtp/ZKo=
902-
github.com/jfrog/jfrog-cli-core/v2 v2.31.1-0.20240408074156-13680c04f22e/go.mod h1:qXAP68g+DlyX2wk5znNbQdK2CcEHfOLOfYXPzdlnkxI=
903-
github.com/jfrog/jfrog-cli-security v1.0.6-0.20240410125927-aed7f83026cb h1:oB8m42t9WEFttiL6OyVYLAMX08vfzAKllyL0PF6Nqo4=
904-
github.com/jfrog/jfrog-cli-security v1.0.6-0.20240410125927-aed7f83026cb/go.mod h1:6eJBg54tzN7bBRe+vbM9QWxBAdZACvcWVgt1aQRpewo=
905-
github.com/jfrog/jfrog-client-go v1.28.1-0.20240409191434-4e96d77edd64 h1:q0GV0IdhYdTqEkNykRwNZP0qNEE8j9dWfY9uKovDPzM=
906-
github.com/jfrog/jfrog-client-go v1.28.1-0.20240409191434-4e96d77edd64/go.mod h1:tUyEmxznphh0nwAGo6xz9Sps7RRW/TBMxIJZteo+j2k=
901+
github.com/jfrog/jfrog-cli-core/v2 v2.51.0 h1:nESbCpSTPZx1av0W9tdmWLxKaPSL1SaZinbZGtYNeFI=
902+
github.com/jfrog/jfrog-cli-core/v2 v2.51.0/go.mod h1:064wSSHVI3ZIVi/a94yJqzs+ACM+9JK/u9tQ1sfTK6A=
903+
github.com/jfrog/jfrog-cli-security v1.1.0 h1:ifCjFJSa1D1pWyW/ADYPqnMkOddzkAT/WY4vHAufn1g=
904+
github.com/jfrog/jfrog-cli-security v1.1.0/go.mod h1:086t7e/einVAGfBXxRdEGDKovWt67I6SqUb1rcpdiZc=
905+
github.com/jfrog/jfrog-client-go v1.40.1 h1:ISSSV7/IUS8R+QCPfH2lVKLburbv2Xn07fvNyDc17rI=
906+
github.com/jfrog/jfrog-client-go v1.40.1/go.mod h1:FprEW0Sqhj6ZSFTFk9NCni+ovFAYMA3zCBmNX4hGXgQ=
907907
github.com/jordan-wright/email v4.0.1-0.20210109023952-943e75fe5223+incompatible h1:jdpOPRN1zP63Td1hDQbZW73xKmzDvZHzVdNYxhnTMDA=
908908
github.com/jordan-wright/email v4.0.1-0.20210109023952-943e75fe5223+incompatible/go.mod h1:1c7szIrayyPPB/987hsnvNzLushdWf4o/79s3P08L8A=
909909
github.com/jstemmer/go-junit-report v0.0.0-20190106144839-af01ea7f8024/go.mod h1:6v2b51hI/fHJwM22ozAgKL4VKDeJcHhJFhtBdhmNjmU=

‎scanpullrequest/scanpullrequest_test.go‎

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -449,7 +449,7 @@ func TestGetAllIssues(t *testing.T) {
449449
Applicable: "Applicable",
450450
FixedVersions: []string{"1.2.3"},
451451
ImpactedDependencyDetails: formats.ImpactedDependencyDetails{
452-
SeverityDetails: formats.SeverityDetails{Severity: "High", SeverityNumValue: 13},
452+
SeverityDetails: formats.SeverityDetails{Severity: "High", SeverityNumValue: 17},
453453
ImpactedDependencyName: "Dep-1",
454454
},
455455
Cves: []formats.CveRow{{Id: "CVE-2022-2122", Applicability: &formats.Applicability{Status: "Applicable", Evidence: []formats.Evidence{{Location: formats.Location{File: "file1", StartLine: 1, StartColumn: 10, EndLine: 2, EndColumn: 11, Snippet: "snippet"}}}}}},
@@ -468,7 +468,7 @@ func TestGetAllIssues(t *testing.T) {
468468
{
469469
SeverityDetails: formats.SeverityDetails{
470470
Severity: "High",
471-
SeverityNumValue: 13,
471+
SeverityNumValue: 17,
472472
},
473473
Finding: "Missing auto upgrade was detected",
474474
Location: formats.Location{
@@ -485,7 +485,7 @@ func TestGetAllIssues(t *testing.T) {
485485
{
486486
SeverityDetails: formats.SeverityDetails{
487487
Severity: "High",
488-
SeverityNumValue: 13,
488+
SeverityNumValue: 17,
489489
},
490490
Finding: "Secret",
491491
Location: formats.Location{
@@ -502,7 +502,7 @@ func TestGetAllIssues(t *testing.T) {
502502
{
503503
SeverityDetails: formats.SeverityDetails{
504504
Severity: "High",
505-
SeverityNumValue: 13,
505+
SeverityNumValue: 17,
506506
},
507507
Finding: "XSS Vulnerability",
508508
Location: formats.Location{
@@ -809,7 +809,7 @@ func TestCreateNewIacRows(t *testing.T) {
809809
{
810810
SeverityDetails: formats.SeverityDetails{
811811
Severity: "High",
812-
SeverityNumValue: 13,
812+
SeverityNumValue: 17,
813813
},
814814
Finding: "Missing auto upgrade was detected",
815815
Location: formats.Location{
@@ -839,7 +839,7 @@ func TestCreateNewIacRows(t *testing.T) {
839839
{
840840
SeverityDetails: formats.SeverityDetails{
841841
Severity: "Medium",
842-
SeverityNumValue: 11,
842+
SeverityNumValue: 14,
843843
},
844844
Finding: "enable_private_endpoint=false was detected",
845845
Location: formats.Location{
@@ -894,7 +894,7 @@ func TestCreateNewSecretRows(t *testing.T) {
894894
{
895895
SeverityDetails: formats.SeverityDetails{
896896
Severity: "High",
897-
SeverityNumValue: 13,
897+
SeverityNumValue: 17,
898898
},
899899
Finding: "Secret",
900900
Location: formats.Location{
@@ -924,7 +924,7 @@ func TestCreateNewSecretRows(t *testing.T) {
924924
{
925925
SeverityDetails: formats.SeverityDetails{
926926
Severity: "Medium",
927-
SeverityNumValue: 11,
927+
SeverityNumValue: 14,
928928
},
929929
Finding: "Secret",
930930
Location: formats.Location{
@@ -979,7 +979,7 @@ func TestCreateNewSastRows(t *testing.T) {
979979
{
980980
SeverityDetails: formats.SeverityDetails{
981981
Severity: "High",
982-
SeverityNumValue: 13,
982+
SeverityNumValue: 17,
983983
},
984984
Finding: "XSS Vulnerability",
985985
Location: formats.Location{
@@ -1009,7 +1009,7 @@ func TestCreateNewSastRows(t *testing.T) {
10091009
{
10101010
SeverityDetails: formats.SeverityDetails{
10111011
Severity: "Medium",
1012-
SeverityNumValue: 11,
1012+
SeverityNumValue: 14,
10131013
},
10141014
Finding: "Stack Trace Exposure",
10151015
Location: formats.Location{

‎testdata/messages/integration/test_proj_pip_with_vulnerability.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@
1616

1717
| SEVERITY | CONTEXTUAL ANALYSIS | DIRECT DEPENDENCIES | IMPACTED DEPENDENCY | FIXED VERSIONS | CVES |
1818
| :---------------------: | :-----------------------------------: | :-----------------------------------: | :-----------------------------------: | :-----------------------------------: | :-----------------------------------: |
19-
| ![](https://raw.githubusercontent.com/jfrog/frogbot/master/resources/v2/applicableHighSeverity.png)<br> High | Undetermined | pip-example:1.2.3 | pyjwt 1.7.1 | [2.4.0] | CVE-2022-29217 |
19+
| ![](https://raw.githubusercontent.com/jfrog/frogbot/master/resources/v2/applicableHighSeverity.png)<br> High | Not Covered | pip-example:1.2.3 | pyjwt 1.7.1 | [2.4.0] | CVE-2022-29217 |
2020

2121
</div>
2222

‎testdata/scanpullrequest/expected_response_multi_dir.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@
1717
| SEVERITY | CONTEXTUAL ANALYSIS | DIRECT DEPENDENCIES | IMPACTED DEPENDENCY | FIXED VERSIONS | CVES |
1818
| :---------------------: | :-----------------------------------: | :-----------------------------------: | :-----------------------------------: | :-----------------------------------: | :-----------------------------------: |
1919
| ![](https://raw.githubusercontent.com/jfrog/frogbot/master/resources/v2/notApplicableHigh.png)<br> High | Not Applicable | minimatch:3.0.4 | minimatch 3.0.4 | [3.0.5] | CVE-2022-3517 |
20-
| ![](https://raw.githubusercontent.com/jfrog/frogbot/master/resources/v2/applicableHighSeverity.png)<br> High | Undetermined | pyjwt:1.7.1 | pyjwt 1.7.1 | [2.4.0] | CVE-2022-29217 |
20+
| ![](https://raw.githubusercontent.com/jfrog/frogbot/master/resources/v2/applicableHighSeverity.png)<br> High | Not Covered | pyjwt:1.7.1 | pyjwt 1.7.1 | [2.4.0] | CVE-2022-29217 |
2121

2222
</div>
2323

0 commit comments

Comments
 (0)