TreyWW / MyFinances

MyFinances is a web application that can help you as an individual, or team, manage your finances!
https://docs.myfinances.cloud
GNU Affero General Public License v3.0
85 stars 121 forks source link

added owner to all models #434

Closed TreyWW closed 1 week ago

TreyWW commented 1 week ago

Description

todo

github-actions[bot] commented 1 week ago

Dependency Review

The following issues were found:

See the Details below.

License Issues

poetry.lock

PackageVersionLicenseIssue Type
pulumi-aws6.42.1NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
pip/boto3-stubs 1.34.136 :green_circle: 5.4
Details
CheckScoreReason
Code-Review:warning: 0Found 1/25 approved changesets -- score normalized to 0
Maintained:green_circle: 1030 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Security-Policy:green_circle: 10security policy file detected
Branch-Protection:warning: 0branch protection not enabled on development/release branches
Packaging:warning: -1packaging workflow not detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Signed-Releases:warning: -1no releases found
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Fuzzing:warning: 0project is not fuzzed
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
SAST:green_circle: 7SAST tool is not run on all commits -- score normalized to 7
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
pip/botocore 1.34.136 :green_circle: 8.5
Details
CheckScoreReason
Code-Review:warning: 0Found 2/27 approved changesets -- score normalized to 0
Maintained:green_circle: 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy:green_circle: 10security policy file detected
Token-Permissions:green_circle: 10GitHub workflow tokens follow principle of least privilege
Packaging:warning: -1packaging workflow not detected
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Fuzzing:green_circle: 10project is fuzzed
SAST:green_circle: 10SAST tool is run on all commits
Binary-Artifacts:green_circle: 10no binaries found in the repo
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Pinned-Dependencies:green_circle: 8dependency not pinned by hash detected -- score normalized to 8
pip/botocore-stubs 1.34.136 UnknownUnknown
pip/django-stubs-ext 4.2.7 :green_circle: 6.2
Details
CheckScoreReason
Maintained:green_circle: 1030 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Code-Review:green_circle: 10all changesets reviewed
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Token-Permissions:green_circle: 9detected GitHub workflow tokens with excessive permissions
Branch-Protection:warning: 0branch protection not enabled on development/release branches
Signed-Releases:warning: -1no releases found
Binary-Artifacts:green_circle: 10no binaries found in the repo
Fuzzing:warning: 0project is not fuzzed
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
Packaging:warning: -1packaging workflow not detected
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Security-Policy:warning: 0security policy file not detected
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
pip/pulumi-aws 6.42.1 UnknownUnknown
pip/setuptools 70.1.1 :green_circle: 6.4
Details
CheckScoreReason
Code-Review:green_circle: 8Found 10/12 approved changesets -- score normalized to 8
Maintained:green_circle: 1030 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Packaging:warning: -1packaging workflow not detected
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Token-Permissions:green_circle: 10GitHub workflow tokens follow principle of least privilege
Security-Policy:green_circle: 10security policy file detected
Branch-Protection:warning: 0branch protection not enabled on development/release branches
Binary-Artifacts:warning: 0binaries present in source code
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Fuzzing:green_circle: 10project is fuzzed
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
pip/boto3-stubs 1.34.135 :green_circle: 5.4
Details
CheckScoreReason
Code-Review:warning: 0Found 1/25 approved changesets -- score normalized to 0
Maintained:green_circle: 1030 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Security-Policy:green_circle: 10security policy file detected
Branch-Protection:warning: 0branch protection not enabled on development/release branches
Packaging:warning: -1packaging workflow not detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Signed-Releases:warning: -1no releases found
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Fuzzing:warning: 0project is not fuzzed
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
SAST:green_circle: 7SAST tool is not run on all commits -- score normalized to 7
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
pip/botocore 1.34.135 :green_circle: 8.5
Details
CheckScoreReason
Code-Review:warning: 0Found 2/27 approved changesets -- score normalized to 0
Maintained:green_circle: 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy:green_circle: 10security policy file detected
Token-Permissions:green_circle: 10GitHub workflow tokens follow principle of least privilege
Packaging:warning: -1packaging workflow not detected
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Fuzzing:green_circle: 10project is fuzzed
SAST:green_circle: 10SAST tool is run on all commits
Binary-Artifacts:green_circle: 10no binaries found in the repo
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Pinned-Dependencies:green_circle: 8dependency not pinned by hash detected -- score normalized to 8
pip/botocore-stubs 1.34.135 UnknownUnknown
pip/django-stubs-ext 5.0.2 :green_circle: 6.2
Details
CheckScoreReason
Maintained:green_circle: 1030 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Code-Review:green_circle: 10all changesets reviewed
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Token-Permissions:green_circle: 9detected GitHub workflow tokens with excessive permissions
Branch-Protection:warning: 0branch protection not enabled on development/release branches
Signed-Releases:warning: -1no releases found
Binary-Artifacts:green_circle: 10no binaries found in the repo
Fuzzing:warning: 0project is not fuzzed
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
Packaging:warning: -1packaging workflow not detected
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Security-Policy:warning: 0security policy file not detected
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
pip/pulumi-aws 6.42.0 UnknownUnknown
pip/setuptools ^ 70.1.1 :green_circle: 6.4
Details
CheckScoreReason
Code-Review:green_circle: 8Found 10/12 approved changesets -- score normalized to 8
Maintained:green_circle: 1030 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Packaging:warning: -1packaging workflow not detected
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Token-Permissions:green_circle: 10GitHub workflow tokens follow principle of least privilege
Security-Policy:green_circle: 10security policy file detected
Branch-Protection:warning: 0branch protection not enabled on development/release branches
Binary-Artifacts:warning: 0binaries present in source code
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Fuzzing:green_circle: 10project is fuzzed
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0

Scanned Manifest Files

poetry.lock
  • boto3-stubs@1.34.136
  • botocore@1.34.136
  • botocore-stubs@1.34.136
  • django-stubs-ext@4.2.7
  • pulumi-aws@6.42.1
  • setuptools@70.1.1
  • boto3-stubs@1.34.135
  • botocore@1.34.135
  • botocore-stubs@1.34.135
  • django-stubs-ext@5.0.2
  • pulumi-aws@6.42.0
pyproject.toml
  • setuptools@^ 70.1.1