fix: scripts/signature-audits/requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-IDNA-6597975 - https://snyk.io/vuln/SNYK-PYTHON-SYMPY-6084333 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-1533435 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-5926907 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-6002459 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250 - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899
communitybridge · Aug 9, 2024 · 04e9bc1 · 04e9bc1
1 parent ff283e0
commit 04e9bc1
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/scripts/signature-audits/requirements.txt b/scripts/signature-audits/requirements.txt
@@ -15,3 +15,4 @@ networkx>=2.6 # not directly required, pinned by Snyk to avoid a vulnerability
 sympy>=1.12 # not directly required, pinned by Snyk to avoid a vulnerability
 urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability
 zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability
+idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability