repo-security-scanner
repo-security-scanner copied to clipboard
CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys
Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 1.5.2 to 2.4.0. Release notes Sourced from pyjwt's releases. 2.4.0 Security [CVE-2022-29217] Prevent key confusion through non-blocklisted public key formats. https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffqj-6fqr-9h24 What's Changed Add support for Python...
Hey there! I was checking the project and was wondering if there's still certain kind of maintenance of it. I'd love to collaborate with whatever roadmap you all created for...
Bumps [future](https://github.com/PythonCharmers/python-future) from 0.16.0 to 0.18.3. Release notes Sourced from future's releases. v0.18.3 This is a minor bug-fix release containing a number of fixes: Backport fix for bpo-38804 (c91d70b) Fix...
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.0.0-20211216030914-fe4d6282115f to 0.7.0. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.0.0-20211216021012-1d35b9e2eb4e to 0.1.0. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Bumps [certifi](https://github.com/certifi/python-certifi) from 2017.4.17 to 2022.12.7. Commits 9e9e840 2022.12.07 b81bdb2 2022.09.24 939a28f 2022.09.14 aca828a 2022.06.15.2 de0eae1 Only use importlib.resources's new files() / Traversable API on Python ≥3.11 ... b8eb5e9 2022.06.15.1...