linkedin / cruise-control

Cruise-control is the first of its kind to fully automate the dynamic workload rebalance and self-healing of a Kafka cluster. It provides great value to Kafka users by simplifying the operation of Kafka clusters.
https://github.com/linkedin/cruise-control/tags
BSD 2-Clause "Simplified" License
2.68k stars 574 forks source link

Create dependency-submission.yml #2143

Open stephengroat opened 2 months ago

stephengroat commented 2 months ago

Currently seeing a lot of dependency vulnerabilities being triggered by cruise-control, wondering if changes could be made to gradle to address these issues

I've made this PR (to enable dependabot) so that there can be some visibility into the dependencies that are currently being marked as vulnerable

Can share access to the dependency vulnerabilties in https://github.com/stephengroat/cruise-control/security/dependabot if anyone is interested

Screenshot 2024-04-11 at 08 58 48