Skip to content

Conversation

@piyushsinghgaur1
Copy link
Collaborator

Issue - #5

This pull request introduces a new security workflow and updates dependency management in the project. The main changes are the addition of a Trivy vulnerability scanning workflow for pull requests and improvements in dependency configuration, including the removal of an unused package and a targeted override for a transitive dependency.

Security and CI/CD Improvements:

  • Added a new GitHub Actions workflow .github/workflows/trivy.yml to automatically run Trivy vulnerability scans on pull requests targeting the main branch, enhancing security checks in the CI pipeline.

Dependency Management:

  • Removed the unused underscore.deepclone package from package.json dependencies, helping to reduce potential security risks and maintenance overhead.
  • Added an overrides section in package.json to force the form-data dependency used by @cypress/request to version 2.5.4, ensuring compatibility and potentially addressing known issues or vulnerabilities.

@piyushsinghgaur1 piyushsinghgaur1 self-assigned this Dec 18, 2025
@piyushsinghgaur1 piyushsinghgaur1 linked an issue Dec 18, 2025 that may be closed by this pull request
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Fix audit vulnerability scan issues

2 participants