Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(sec): upgrade org.yaml:snakeyaml to 2.0 #4873

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

cubxxw
Copy link

@cubxxw cubxxw commented Sep 11, 2023

What happened?

There are 1 security vulnerabilities found in org.yaml:snakeyaml 1.29

What did I do?

Upgrade org.yaml:snakeyaml from 1.29 to 2.0 for vulnerability fix

What did you expect to happen?

Ideally, no insecure libs should be used.

How can we automate the detection of these types of issues?

By using the GitHub Actions configurations provided by murphysec, we can conduct automatic code security checks in our CI pipeline.

@CLAassistant
Copy link

CLAassistant commented Sep 11, 2023

CLA assistant check
All committers have signed the CLA.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants