guibranco / pancake

🧰 πŸ› οΈ Pancake project - toolkit for PHP projects
https://guibranco.github.io/pancake/
MIT License
3 stars 1 forks source link

[Snyk] Security upgrade zipp from 3.15.0 to 3.19.1 #173

Closed guibranco closed 3 months ago

guibranco commented 3 months ago

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123) ### Snyk has created this PR to fix 1 vulnerabilities in the pip dependencies of this project. #### Snyk changed the following file(s): - `requirements.txt` --- > [!IMPORTANT] > > - Check the changes in this PR to ensure they won't cause issues with your project. > - Max score is 1000. Note that the real score may have changed since the PR was raised. > - This PR was automatically created by Snyk using the credentials of a real user. > - Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the affected dependencies could be upgraded. --- **Note:** _You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs._ For more information: 🧐 [View latest project report](https://app.snyk.io/org/guibranco/project/7069b772-2ca6-4fae-b46b-2e00c1467d65?utm_source=github&utm_medium=referral&page=fix-pr) πŸ“œ [Customise PR templates](https://docs.snyk.io/scan-using-snyk/pull-requests/snyk-fix-pull-or-merge-requests/customize-pr-templates) πŸ›  [Adjust project settings](https://app.snyk.io/org/guibranco/project/7069b772-2ca6-4fae-b46b-2e00c1467d65?utm_source=github&utm_medium=referral&page=fix-pr/settings) πŸ“š [Read about Snyk's upgrade logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) --- **Learn how to fix vulnerabilities with free interactive lessons:** πŸ¦‰ [Learn about vulnerability in an interactive lesson of Snyk Learn.](https://learn.snyk.io/?loc=fix-pr) [//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"zipp","from":"3.15.0","to":"3.19.1"}],"env":"prod","issuesToFix":[{"exploit_maturity":"Proof of Concept","id":"SNYK-PYTHON-ZIPP-7430899","priority_score":738,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"6.9","score":345},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Infinite loop"}],"prId":"6b637269-2668-4de3-b82d-27027c387e5c","prPublicId":"6b637269-2668-4de3-b82d-27027c387e5c","packageManager":"pip","priorityScoreList":[738],"projectPublicId":"7069b772-2ca6-4fae-b46b-2e00c1467d65","projectUrl":"https://app.snyk.io/org/guibranco/project/7069b772-2ca6-4fae-b46b-2e00c1467d65?utm_source=github&utm_medium=referral&page=fix-pr","prType":"fix","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["updated-fix-title","priorityScore"],"type":"auto","upgrade":[],"vulns":["SNYK-PYTHON-ZIPP-7430899"],"patch":[],"isBreakingChange":false,"remediationStrategy":"vuln"}'
deepsource-io[bot] commented 3 months ago

Here's the code health analysis summary for commits 2e55ae8..83133d2. View details on DeepSource β†—.

Analysis Summary

AnalyzerStatusSummaryLink
DeepSource Test coverage LogoTest coverageβœ… SuccessView Check β†—
DeepSource SQL LogoSQLβœ… SuccessView Check β†—
DeepSource Secrets LogoSecretsβœ… SuccessView Check β†—
DeepSource PHP LogoPHPβœ… SuccessView Check β†—
DeepSource Docker LogoDockerβœ… SuccessView Check β†—

Code Coverage Report

MetricAggregatePhp
Branch Coverage100%100%
Composite Coverage95.3%95.3%
Line Coverage95.3%95.3%

πŸ’‘ If you’re a repository administrator, you can configure the quality gates from the settings.
codacy-production[bot] commented 3 months ago

Coverage summary from Codacy

See diff coverage on Codacy

Coverage variation Diff coverage
Report missing for 2e55ae8d69b015355b859d0e80ff98d248dba5d8[^1] :white_check_mark: βˆ…
Coverage variation details | | Coverable lines | Covered lines | Coverage | | ------------- | ------------- | ------------- | ------------- | | Common ancestor commit (2e55ae8d69b015355b859d0e80ff98d248dba5d8) | Report Missing | Report Missing | Report Missing | | | Head commit (83133d275f4fe51e35550e8b4e448c56307456ed) | 212 | 202 | 95.28% | **Coverage variation** is the difference between the coverage for the head and common ancestor commits of the pull request branch: ` - `
Diff coverage details | | Coverable lines | Covered lines | Diff coverage | | ------------- | ------------- | ------------- | ------------- | | Pull request (#173) | 0 | 0 | **βˆ… (not applicable)** | **Diff coverage** is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: `/ * 100%`

See your quality gate settings    Change summary preferences


:rocket: Don’t miss a bit, follow what’s new on Codacy.

Codacy stopped sending the deprecated coverage status on June 5th, 2024. Learn more [^1]: Codacy didn't receive coverage data for the commit, or there was an error processing the received data. Check your integration for errors and validate that your coverage setup is correct.

github-actions[bot] commented 3 months ago

Infisical secrets check: :white_check_mark: No secrets leaked!

Scan results:

3:06PM INF scanning for exposed secrets...
3:06PM INF 127 commits scanned.
3:06PM INF scan completed in 399ms
3:06PM INF no leaks found
sonarcloud[bot] commented 3 months ago

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

codecov[bot] commented 3 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 95.16%. Comparing base (2e55ae8) to head (83133d2).

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #173 +/- ## ======================================= Coverage 95.16% 95.16% ======================================= Files 7 7 Lines 207 207 ======================================= Hits 197 197 Misses 10 10 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.