-
Notifications
You must be signed in to change notification settings - Fork 637
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore: address js dependency security issues #2205
Conversation
35db7d8
to
d5afa03
Compare
75385bd
to
7fa3e10
Compare
The Here is the current report:
|
Found a better compromise:
Given the cypress is not an actual runtime dependency (dev dependency for testing only), I am not worried about this warning. We can address this later once we bring cypress testing back online. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM!
/og
merge.In
next
, it yields:See comments below for updated
trivy
reports.