diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 4a98ff9..d6dbb30 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -118,8 +118,10 @@ jobs: image-ref: crms-backend:${{ github.sha }} format: table exit-code: 1 + vuln-type: os,library severity: CRITICAL ignore-unfixed: true + trivyignores: .trivyignore - name: Trivy scan — frontend uses: aquasecurity/trivy-action@master @@ -127,5 +129,7 @@ jobs: image-ref: crms-frontend:${{ github.sha }} format: table exit-code: 1 + vuln-type: os,library severity: CRITICAL - ignore-unfixed: true \ No newline at end of file + ignore-unfixed: true + trivyignores: .trivyignore \ No newline at end of file diff --git a/.trivyignore b/.trivyignore new file mode 100644 index 0000000..e69de29 diff --git a/backend/requirements.txt b/backend/requirements.txt index 7f2a768..4e3a209 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -1,31 +1,15 @@ -alembic==1.18.4 -annotated-doc==0.0.4 -annotated-types==0.7.0 -anyio==4.13.0 -bcrypt==5.0.0 -cffi==2.0.0 -click==8.3.3 -colorama==0.4.6 -cryptography==47.0.0 -ecdsa==0.19.2 -fastapi==0.136.1 -greenlet==3.5.0 -h11==0.16.0 -idna==3.13 -Mako==1.3.12 -MarkupSafe==3.0.3 +fastapi==0.115.12 +uvicorn==0.34.3 +sqlalchemy==2.0.41 +psycopg2-binary==2.9.10 +alembic==1.14.1 +python-jose==3.4.0 passlib==1.7.4 -psycopg2-binary==2.9.12 -pyasn1==0.6.3 -pycparser==3.0 -pydantic==2.13.3 -pydantic_core==2.46.3 -python-dotenv==1.2.2 -python-jose==3.5.0 -rsa==4.9.1 -six==1.17.0 -SQLAlchemy==2.0.49 -starlette==1.0.0 -typing-inspection==0.4.2 -typing_extensions==4.15.0 -uvicorn==0.46.0 +bcrypt==4.2.1 +python-dotenv==1.1.0 +pydantic==2.11.4 +python-multipart==0.0.20 +anyio==4.9.0 +httpx==0.28.1 +pytest==8.3.5 +pytest-asyncio==0.26.0 \ No newline at end of file