podaac / concise

CONCISE (CONCatenatIon SErvice)
https://podaac.github.io/concise
Apache License 2.0
7 stars 4 forks source link

Enable snyk monitor #25

Closed frankinspace closed 2 years ago

frankinspace commented 2 years ago

Github Issue: N/A

Description

Changed CLI step in build action to use snyk monitor so that report is uploaded to SNYK podaac org. Also ran poetry update

Overview of work done

Updated build workflow. Also added new secrets so build works.

poetry updated the following libraries:

  • Updating jmespath (0.10.0 -> 1.0.0)
  • Updating urllib3 (1.26.7 -> 1.26.9)
  • Updating botocore (1.23.10 -> 1.24.32)
  • Updating charset-normalizer (2.0.7 -> 2.0.12)
  • Updating markupsafe (2.0.1 -> 2.1.1)
  • Updating pyparsing (3.0.6 -> 3.0.7)
  • Updating pytz (2021.3 -> 2022.1)
  • Updating attrs (21.2.0 -> 21.4.0)
  • Updating jinja2 (3.0.3 -> 3.1.1)
  • Updating lazy-object-proxy (1.6.0 -> 1.7.1)
  • Updating numpy (1.21.1 -> 1.22.3)
  • Updating pygments (2.10.0 -> 2.11.2)
  • Updating requests (2.26.0 -> 2.27.1)
  • Updating s3transfer (0.5.0 -> 0.5.2)
  • Updating typing-extensions (4.0.0 -> 4.1.1)
  • Updating wrapt (1.13.3 -> 1.14.0)
  • Updating astroid (2.8.6 -> 2.11.2)
  • Updating boto3 (1.20.10 -> 1.21.32)
  • Updating cftime (1.5.1.1 -> 1.6.0)
  • Updating coverage (6.1.2 -> 6.3.2)
  • Updating platformdirs (2.4.0 -> 2.5.1)
  • Updating pynacl (1.4.0 -> 1.5.0)
  • Updating zipp (3.6.0 -> 3.7.0)
  • Updating harmony-service-lib (1.0.12 -> 1.0.14)
  • Updating importlib-metadata (4.8.2 -> 4.11.3)
  • Updating pylint (2.11.1 -> 2.13.4)
  • Updating sphinx (3.5.4 -> 4.5.0)
  • Updating docutils (0.16 -> 0.17.1)
  • Updating sphinx-rtd-theme (0.5.2 -> 1.0.0)

Overview of verification done

Ran build on this branch and checked that report successfully was uploaded to the SNYK org. https://app.snyk.io/org/po.daac/project/4cdbeef4-66e6-4b7e-b205-2f903a018d08

Overview of integration done

N/A

PR checklist:

See Pull Request Review Checklist for pointers on reviewing this pull request