Snyk auto fix

[c2c-bot-gis-ci]

⠋ Running snyk test for /home/runner/work/c2cgeoportal/c2cgeoportal
► Running snyk test for /home/runner/work/c2cgeoportal/c2cgeoportal

• Looking for supported Python items

✔ Looking for supported Python items
⠋ Processing 4 requirements.txt items⠙ Processing 3 Pipfile items✔ Processed 4 requirements.txt items

• Checking pipenv version
  ⚠️ 2022.1.8 pipenv version detected. Currently the following pipenv versions are supported: 2022.10.12,2022.9.21,2022.8.31,2022.7.24,2022.6.7,2022.5.2,2022.4.21,2021.11.23,2020.11.4,2020.8.13,2020.6.2,2020.5.28,2018.11.26,2018.11.14,2018.10.13,2018.10.9,2018.7.1,2018.6.25
• Fixing Pipfile 1/2
• Fixing Pipfile 2/2
  ✔ Processed 3 Pipfile items
  ✔ Done

Successful fixes:

admin/requirements.txt
✔ Pinned urllib3 from 1.26.16 to 1.26.17

geoportal/requirements.txt
✔ Pinned urllib3 from 1.26.16 to 1.26.17

Pipfile
✔ Upgraded urllib3 from 1.26.16 to 1.26.17

Unresolved items:

ci/Pipfile
✖ There is no actionable remediation to apply

commons/requirements.txt
✖ There is no actionable remediation to apply

docker/qgisserver/requirements.txt
✖ There is no actionable remediation to apply

doc/Pipfile
x Failed to upgrade urllib3 from 1.26.16 to 1.26.17
Reason: No fixes could be applied.
Tip: Try running pipenv install urllib3==1.26.17

package-lock.json
✖ npm is not supported.

Summary:

5 items were not fixed
3 items were successfully fixed
3 items were not vulnerable

27 issues: 2 Critical | 1 High | 15 Medium | 9 Low
4 issues are fixable
3 issues were successfully fixed

Tip: Re-run in debug mode to see more information: DEBUG=snyk . If the issue persists contact [email protected]