microsoft / component-detection

Scans your project to determine what components you use
MIT License
398 stars 83 forks source link

Resolve vulnerabilities in transitive dep #1023

Closed grvillic closed 4 months ago

grvillic commented 4 months ago

Context

Resolving security alert that impacts some .NET environments, see https://github.com/NuGet/NuGet.Client/security/advisories/GHSA-68w7-72jg-6qpp

codecov[bot] commented 4 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 75.4%. Comparing base (bb153af) to head (d7a2993).

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #1023 +/- ## ===================================== Coverage 75.4% 75.4% ===================================== Files 236 236 Lines 10407 10407 Branches 1039 1039 ===================================== Hits 7850 7850 Misses 2267 2267 Partials 290 290 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

github-actions[bot] commented 4 months ago

👋 Hi! It looks like you modified some files in the Detectors folder. You may need to bump the detector versions if any of the following scenarios apply:

If none of the above scenarios apply, feel free to ignore this comment 🙂