Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: included dependency review #75

Closed
wants to merge 1 commit into from

Conversation

naveensrinivasan
Copy link
Contributor

Description

  • The dependency review will address CVE and license issues.

Related Issue

Type of change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Other (security config, docs update, etc)

Checklist before merging

- included dependency review which will address CVE and License issues.
- defenseunicorns/uds-software-factory#28

Signed-off-by: naveensrinivasan <[email protected]>
@naveensrinivasan naveensrinivasan self-assigned this Mar 19, 2024
@naveensrinivasan naveensrinivasan marked this pull request as ready for review March 19, 2024 15:55
@Racer159
Copy link
Contributor

Racer159 commented Mar 19, 2024

This doesn't really answer the needs of the CVE scanning / license check issue - the only dependencies this action will capture are actions most of which come from uds-common anyway (minorly helpful, but nothing we actually ship)

image

We need to introspect packages to look at charts, and especially images

@Racer159
Copy link
Contributor

closing in favor of #98 once that is ready

@Racer159 Racer159 closed this Apr 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants