From a70b0164c9fb16273707651908fe9c6dcb17ded0 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 10 Jul 2024 09:30:54 +0000 Subject: [PATCH] fix: scripts/signature-audits/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899 --- scripts/signature-audits/requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/scripts/signature-audits/requirements.txt b/scripts/signature-audits/requirements.txt index 9ec5277c1..14824db7c 100644 --- a/scripts/signature-audits/requirements.txt +++ b/scripts/signature-audits/requirements.txt @@ -12,3 +12,4 @@ requests==2.31.0 requests-oauthlib==1.2.0 moto==1.3.14 networkx>=2.6 # not directly required, pinned by Snyk to avoid a vulnerability +zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability