Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixes the github security errors #411

Merged
merged 2 commits into from
Aug 4, 2023
Merged

Conversation

ribalba
Copy link
Member

@ribalba ribalba commented Aug 3, 2023

No description provided.

@ribalba ribalba requested a review from ArneTR August 3, 2023 13:49
frontend/js/helpers/main.js Fixed Show resolved Hide resolved
frontend/js/helpers/main.js Fixed Show fixed Hide fixed
frontend/js/helpers/main.js Fixed Show fixed Hide fixed
@ribalba ribalba mentioned this pull request Aug 3, 2023
@ArneTR
Copy link
Member

ArneTR commented Aug 3, 2023

Rest LGTM

@ribalba
Copy link
Member Author

ribalba commented Aug 4, 2023

I was thinking the same thing. It's not really a security problem so I refactored it to be "nicer" to read. But I think the new solution is also readable and gives us the advantage, that it can not be spoofed. And CodeQL doesn't complain :)

@ArneTR please merge if this is ok.

@ArneTR
Copy link
Member

ArneTR commented Aug 4, 2023

cool

@ArneTR ArneTR merged commit 03730a8 into main Aug 4, 2023
@ArneTR ArneTR deleted the fixes-github-security-notifications branch August 4, 2023 11:05
ArneTR added a commit that referenced this pull request Aug 4, 2023
* 'main' of github.com:green-coding-berlin/green-metrics-tool:
  eco-ci will now post the energy reading in the PR conversation (#397)
  SCI metric (#412)
  Fixes the github security errors (#411)
ArneTR added a commit that referenced this pull request Aug 4, 2023
* main:
  Ignore filesystem paths
  Bugfix: Phases ordering was wrong way round
  eco-ci will now post the energy reading in the PR conversation (#397)
  SCI metric (#412)
  Fixes the github security errors (#411)
  API does not block returning machines, but will now return if they are available or not
  Enables empty services in the usage_scenario (#409)
  wrong import
  jobs.py now appends date
  Fixes the error on mac on which /tmp is a symlink to /private/tmp (#410)
  Fixes the metric output file becoming corrupted (#393)
  Only available machines may be listed
  Index.js now can filter by repo and filename (#408)
  Python requirements are now freshly updated with every install
  Gunicorn container now on python3-slim (Debian) instead of Ubuntu 22.04
ArneTR added a commit that referenced this pull request Aug 8, 2023
* main: (42 commits)
  Added exception handling to client.py
  Fix and better display of SCI values in badged and dashboard
  Increased the waiting time for powermetrics to shut down
  Bugfix for non-string types replacement
  Docker prune is now the default for jobs.py
  Bump psycopg[binary] from 3.1.9 to 3.1.10 (#413)
  Bump fastapi from 0.100.1 to 0.101.0 (#414)
  Bump orjson from 3.9.2 to 3.9.3 (#415)
  Ignore filesystem paths
  Bugfix: Phases ordering was wrong way round
  eco-ci will now post the energy reading in the PR conversation (#397)
  SCI metric (#412)
  Fixes the github security errors (#411)
  API does not block returning machines, but will now return if they are available or not
  Enables empty services in the usage_scenario (#409)
  wrong import
  jobs.py now appends date
  Fixes the error on mac on which /tmp is a symlink to /private/tmp (#410)
  Fixes the metric output file becoming corrupted (#393)
  Only available machines may be listed
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants