get Alex the list of software/libraries to scan for CVEs

dcarsey commented 4 years ago

List for libraries:

all libraries are in the pipeline container:

apt-get:
openjdk-8-jdk gnupu sbt python3-pip postgresql-client-11

pip: schedule pandas psycopg2-binary csvkit requests flask redis rq oslash sherlock

direct download: apache-spark

Front-end dependencies (NPM)

material-ui nivo axios d3 d3-sankey d3-scale-chromatic d3-tip material-table react react-dom react-router-dom react-scripts webfontloader

API dependencies (NPM)

express pg-promise cors

Dockerd yum-utils device-mapper-persistent-data lvm2 emacs docker-ce screen traceroute

dcarsey commented 4 years ago

Sent on 12-6-19.

dcarsey commented 4 years ago

Sent on 12/6/2019

dcarsey commented 4 years ago

Now chasing down version numbers of libraries where appropriate. Sent to Matt and Hao on 12/12/2019.

mbwatson commented 3 years ago

i think Alex is fine. do we still need to track this?

dcarsey commented 3 years ago

@mbwatson Only when/if we move forward with UNC CloudApps.

RENCI / ctmd