cblanc / sws_gathers

NSL Gathers App

http://gathers.ensl.org

8 stars 9 forks source link

Snyk Fixup Patch #177

Closed brcaswell closed 4 years ago

brcaswell commented 4 years ago

Adds snyk file
Adds snyk package and scripts
- In respect to Static\Dynamic Application Security Testing (SAST \ DAST), adds automated, continuous integration security support
npm package version bumping (as determined by synk bot and dependabot)

Includes the following PR's and their respective branches:

109 #112 #113 #114 #115 #116 #117 #118 #120 #121 #123 #126 #128 #130 #134 #135 #136 #138 #139 #146 #148 #149 #150 #151 #152 #153 #154 #155 #158 #160 #161 #162 #165 #166 #168 #172

resolves #176

brcaswell commented 4 years ago

Here's some additional info for some of these changes the bot looks to be introducing. snyk package info: https://www.npmjs.com/package/snyk .snyk file doc: https://support.snyk.io/hc/en-us/articles/360007487097-The-snyk-file

Also, A squash merge may be a good consideration here. And we may want to consider creating a temporary staging\candidate branch in this repo to facilitate this sort of PR and stale branch\PR fixup effort.

Absurdon commented 4 years ago

I based of of this pr to do the dockerization. Multiple Changes were needed as React.createClass has been removed