Audit Snyk check/fix 2.6

[geo-ghci-int[bot]]

⠋ Running snyk test for /tmp/tmpnsrr44se/c2cgeoportal ► Running snyk test for /tmp/tmpnsrr44se/c2cgeoportal

• Looking for supported Python items

✔ Looking for supported Python items ⠋ Processing 4 requirements.txt items⠙ Processing 3 Pipfile items✔ Processed 4 requirements.txt items

• Checking pipenv version ⚠️ 2022.1.8 pipenv version detected. Currently the following pipenv versions are supported: 2022.10.12,2022.9.21,2022.8.31,2022.7.24,2022.6.7,2022.5.2,2022.4.21,2021.11.23,2020.11.4,2020.8.13,2020.6.2,2020.5.28,2018.11.26,2018.11.14,2018.10.13,2018.10.9,2018.7.1,2018.6.25 ✔ Processed 3 Pipfile items ✔ Done

Successful fixes:

admin/requirements.txt ✔ Pinned zipp from 3.7.0 to 3.19.1

geoportal/requirements.txt ✔ Pinned zipp from 3.7.0 to 3.19.1

Unresolved items:

Pipfile ✖ There is no actionable remediation to apply

ci/Pipfile ✖ There is no actionable remediation to apply

doc/Pipfile ✖ There is no actionable remediation to apply

commons/requirements.txt ✖ There is no actionable remediation to apply

docker/qgisserver/requirements.txt ✖ There is no actionable remediation to apply Summary: 5 items were not fixed 2 items were successfully fixed 4 items were not vulnerable

18 issues: 2 Critical | 2 Medium | 14 Low 2 issues are fixable 2 issues were successfully fixed

Tip: Re-run in debug mode to see more information: DEBUG=*snyk* <COMMAND>. If the issue persists contact [email protected]