fix: src/loadgenerator/requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-7448482 - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899
shigeya-dd · Aug 5, 2024 · ba4d5e1 · ba4d5e1
1 parent 663b1fe
commit ba4d5e1
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/loadgenerator/requirements.txt b/src/loadgenerator/requirements.txt
@@ -41,3 +41,5 @@ werkzeug==3.0.1
 wrapt==1.16.0
 zope-event==5.0
 zope-interface==6.1
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability