Update dependencies to address CVEs - Githubissues

cyberark / secretless-broker

Secure your apps by making them Secretless

Apache License 2.0

234 stars 42 forks source link

Update dependencies to address CVEs #1405

Closed andytinkham closed 3 years ago

andytinkham commented 3 years ago

Signed-off-by: Andy Tinkham andy.tinkham@cyberark.com

What does this PR do?

Updates rexml in the docs/Gemfile.lock to 3.2.5 from 3.2.4 to address CVE-2021-28965
Updates go text package to 0.3.3 to address CVE-2020-14040

What ticket does this PR close?

Dependabot alert

Checklists

Change log

[ ] The CHANGELOG has been updated, or
[X] This PR does not include user-facing changes and doesn't require a CHANGELOG update

Test coverage

[ ] This PR includes new unit and integration tests to go with the code changes, or
[X] The changes in this PR do not require tests

Documentation

[ ] This PR does not require updating any documentation, or
[X] Docs (e.g. READMEs) were updated in this PR, and/or there is a follow-on issue to update docs

(For releases only) Manual tests

[ ] Manually run Kubernetes-Conjur demo with a local Secretless Broker image build of your branch

codeclimate[bot] commented 3 years ago

Code Climate has analyzed commit 7d83b99a and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 53.6% (0.0% change).

View more on Code Climate.