Skip to content

Commit

Permalink
[Snyk] Security upgrade axios from 1.7.7 to 1.7.8 (#264)
Browse files Browse the repository at this point in the history
* Replacing deprecated sendfile method in express.js
* Updating github codeql version
* fix: logstash/tests/package.json & logstash/tests/package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-AXIOS-6671926

---------

Co-authored-by: snyk-bot <snyk-bot@snyk.io>
  • Loading branch information
epacke and snyk-bot authored Dec 16, 2024
1 parent a216675 commit e1d7768
Show file tree
Hide file tree
Showing 4 changed files with 9 additions and 9 deletions.
6 changes: 3 additions & 3 deletions .github/workflows/codeql-analysis.yml
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ jobs:

# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@v1
uses: github/codeql-action/init@v3
with:
languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a config file.
Expand All @@ -50,7 +50,7 @@ jobs:
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
# If this step fails, then you should remove it and run the build manually (see below)
- name: Autobuild
uses: github/codeql-action/autobuild@v1
uses: github/codeql-action/autobuild@v3

# ℹ️ Command-line programs to run using the OS shell.
# 📚 https://git.io/JvXDl
Expand All @@ -64,4 +64,4 @@ jobs:
# make release

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v1
uses: github/codeql-action/analyze@v3
8 changes: 4 additions & 4 deletions logstash/tests/package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion logstash/tests/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@
"typescript": "^4.6.2"
},
"dependencies": {
"axios": "^1.7.7",
"axios": "^1.7.8",
"ws": "^8.18.0"
}
}
2 changes: 1 addition & 1 deletion pipeline-ui/backend/src/index.ts
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ app.use(httpLogger);

// Render the default page when browsing the root
app.get('/', function(req, res) {
res.sendfile('index.html', {root: __dirname + '/public/index.html'} );
res.sendFile('index.html', {root: __dirname + '/public/index.html'} );
});

app.ws('/api/v1/getLogstashOutput', (ws, req) => {});
Expand Down

0 comments on commit e1d7768

Please sign in to comment.