search

jakartaee / inject

Apache License 2.0
17 stars 17 forks source link

[StepSecurity] Apply security best practices #32

Open step-security-bot opened 1 year ago

step-security-bot commented 1 year ago

Summary

This pull request is created by Secure Repo at the request of @fperezel. Please merge the Pull Request to incorporate the requested changes. Please tag @fperezel on your message if you have any questions related to the PR. You can also engage with the StepSecurity team by tagging @step-security-bot.

Security Fixes

resolve: #31

Keeping your actions up to date with Dependabot

With Dependabot version updates, when Dependabot identifies an outdated dependency, it raises a pull request to update the manifest to the latest version of the dependency. This is recommended by GitHub as well as The Open Source Security Foundation (OpenSSF).

Feedback

For bug reports, feature requests, and general feedback; please create an issue in step-security/secure-repo. To create such PRs, please visit https://app.stepsecurity.io/securerepo.

Signed-off-by: StepSecurity Bot bot@stepsecurity.io

Ladicek commented 1 year ago

LGTM, but a 2nd review would be nice.

ghost commented 1 year ago

Hi there,

I've already tested the changes and it will create 5 bump PR, more information here https://github.com/DummyOrganisationTest/jarkataee_injection_test/pulls

I am testing out other repos.

Finally, please bear in mind that by default dependabot will alert about updates and it could be setup only for security updates. Please don't hesitate and let me know if only security update is what is needed for this repo.

Cheers, FP