Snyk auto fix

[c2c-bot-gis-ci-2]

⠋ Running snyk test for /home/runner/work/c2cgeoportal/c2cgeoportal
► Running snyk test for /home/runner/work/c2cgeoportal/c2cgeoportal

• Looking for supported Python items

✔ Looking for supported Python items
⠋ Processing 4 requirements.txt items⠙ Processing 3 Pipfile items✔ Processed 4 requirements.txt items

• Checking pipenv version
  ⚠️ 2022.1.8 pipenv version detected. Currently the following pipenv versions are supported: 2022.10.12,2022.9.21,2022.8.31,2022.7.24,2022.6.7,2022.5.2,2022.4.21,2021.11.23,2020.11.4,2020.8.13,2020.6.2,2020.5.28,2018.11.26,2018.11.14,2018.10.13,2018.10.9,2018.7.1,2018.6.25
• Fixing Pipfile 1/2
• Fixing Pipfile 2/2
  ✔ Processed 3 Pipfile items
  ✔ Done

Successful fixes:

admin/requirements.txt
✔ Upgraded urllib3 from 1.26.18 to 1.26.19

geoportal/requirements.txt
✔ Upgraded urllib3 from 1.26.18 to 1.26.19

Pipfile
✔ Upgraded urllib3 from 1.26.18 to 1.26.19

doc/Pipfile
✔ Upgraded urllib3 from 1.26.18 to 1.26.19

Unresolved items:

ci/Pipfile
✖ There is no actionable remediation to apply

commons/requirements.txt
✖ There is no actionable remediation to apply

docker/qgisserver/requirements.txt
✖ There is no actionable remediation to apply

package-lock.json
✖ npm is not supported.

Summary:

4 items were not fixed
4 items were successfully fixed
3 items were not vulnerable

22 issues: 2 Critical | 2 High | 4 Medium | 14 Low
5 issues are fixable
4 issues were successfully fixed

Tip: Re-run in debug mode to see more information: DEBUG=snyk . If the issue persists contact [email protected]