diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml new file mode 100644 index 0000000..cba90b8 --- /dev/null +++ b/.github/workflows/trivy.yml @@ -0,0 +1,29 @@ +# This is a basic workflow to help you get started with Actions + +name: Trivy Scan + +# Controls when the action will run. Triggers the workflow on push or pull request +# events but only for the master branch +on: + pull_request: + branches: [main] + types: [opened, synchronize, reopened] + +# A workflow run is made up of one or more jobs that can run sequentially or in parallel +jobs: + # This workflow contains a single job called "trivy" + trivy: + # The type of runner that the job will run on + runs-on: [self-hosted, linux, codebuild] + + # Steps represent a sequence of tasks that will be executed as part of the job + steps: + # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it + - uses: actions/checkout@v3 + + - name: Run Trivy vulnerability scanner in repo mode + uses: aquasecurity/trivy-action@0.28.0 + with: + scan-type: "fs" + scan-ref: "${{ github.workspace }}" + trivy-config: "${{ github.workspace }}/trivy.yaml" diff --git a/package-lock.json b/package-lock.json index e06ecee..931b7fc 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,11 +1,11 @@ { - "name": "react-saas-ui", + "name": "arc-react-saas-ui", "version": "0.0.0", "lockfileVersion": 3, "requires": true, "packages": { "": { - "name": "react-saas-ui", + "name": "arc-react-saas-ui", "version": "0.0.0", "dependencies": { "@emotion/react": "^11.10.5", @@ -38,7 +38,6 @@ "tinycolor2": "^1.4.2", "typescript-eslint": "^8.41.0", "underscore": "^1.13.7", - "underscore.deepclone": "^0.1.3", "use-react-router-breadcrumbs": "^4.0.1", "yup": "^0.32.11" }, @@ -10828,16 +10827,20 @@ } }, "node_modules/form-data": { - "version": "2.3.3", - "resolved": "https://registry.npmjs.org/form-data/-/form-data-2.3.3.tgz", - "integrity": "sha512-1lLKB2Mu3aGP1Q/2eCOx0fNbRMe7XdwktwOruhfqqd0rIJWwN4Dh+E3hrPSlDCXnSR7UtZ1N38rVXm+6+MEhJQ==", + "version": "2.5.4", + "resolved": "https://registry.npmjs.org/form-data/-/form-data-2.5.4.tgz", + "integrity": "sha512-Y/3MmRiR8Nd+0CUtrbvcKtKzLWiUfpQ7DFVggH8PwmGt/0r7RSy32GuP4hpCJlQNEBusisSx1DLtD8uD386HJQ==", + "deprecated": "This version has an incorrect dependency; please use v2.5.5", "dev": true, "license": "MIT", "peer": true, "dependencies": { "asynckit": "^0.4.0", - "combined-stream": "^1.0.6", - "mime-types": "^2.1.12" + "combined-stream": "^1.0.8", + "es-set-tostringtag": "^2.1.0", + "has-own": "^1.0.1", + "mime-types": "^2.1.35", + "safe-buffer": "^5.2.1" }, "engines": { "node": ">= 0.12" @@ -11360,6 +11363,15 @@ "node": ">=8" } }, + "node_modules/has-own": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/has-own/-/has-own-1.0.1.tgz", + "integrity": "sha512-RDKhzgQTQfMaLvIFhjahU+2gGnRBK6dYOd5Gd9BzkmnBneOCRYjRC003RIMrdAbH52+l+CnMS4bBCXGer8tEhg==", + "deprecated": "This project is not maintained. Use Object.hasOwn() instead.", + "dev": true, + "license": "MIT", + "peer": true + }, "node_modules/has-property-descriptors": { "version": "1.0.2", "resolved": "https://registry.npmjs.org/has-property-descriptors/-/has-property-descriptors-1.0.2.tgz", @@ -17195,19 +17207,6 @@ "integrity": "sha512-GMXzWtsc57XAtguZgaQViUOzs0KTkk8ojr3/xAxXLITqf/3EMwxC0inyETfDFjH/Krbhuep0HNbbjI9i/q3F3g==", "license": "MIT" }, - "node_modules/underscore.deepclone": { - "version": "0.1.3", - "resolved": "https://registry.npmjs.org/underscore.deepclone/-/underscore.deepclone-0.1.3.tgz", - "integrity": "sha512-syhlJpD1iJQxT26ALVr/PsG427VWFoy3n6sHK8gbgXUwni9YjQa58nPVSjRJsMSR6sQK15McT315Al5x/sTpsQ==", - "dependencies": { - "underscore": "~1.5.0" - } - }, - "node_modules/underscore.deepclone/node_modules/underscore": { - "version": "1.5.2", - "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.5.2.tgz", - "integrity": "sha512-yejOFsRnTJs0N9CK5Apzf6maDO2djxGoLLrlZlvGs2o9ZQuhIhDL18rtFyy4FBIbOkzA6+4hDgXbgz5EvDQCXQ==" - }, "node_modules/undici-types": { "version": "5.26.5", "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-5.26.5.tgz", @@ -17604,22 +17603,6 @@ } } }, - "node_modules/vite-tsconfig-paths/node_modules/typescript": { - "version": "5.9.2", - "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.2.tgz", - "integrity": "sha512-CWBzXQrc/qOkhidw1OzBTQuYRbfyxDXJMVJ1XNwUHGROVmuaeiEm3OslpZ1RV96d7SKKjZKrSJu3+t/xlw3R9A==", - "dev": true, - "license": "Apache-2.0", - "optional": true, - "peer": true, - "bin": { - "tsc": "bin/tsc", - "tsserver": "bin/tsserver" - }, - "engines": { - "node": ">=14.17" - } - }, "node_modules/vitest": { "version": "0.28.5", "resolved": "https://registry.npmjs.org/vitest/-/vitest-0.28.5.tgz", diff --git a/package.json b/package.json index dc2ff98..3085d07 100644 --- a/package.json +++ b/package.json @@ -52,7 +52,6 @@ "tinycolor2": "^1.4.2", "typescript-eslint": "^8.41.0", "underscore": "^1.13.7", - "underscore.deepclone": "^0.1.3", "use-react-router-breadcrumbs": "^4.0.1", "yup": "^0.32.11" }, @@ -112,5 +111,10 @@ "cz-customizable": { "config": "./.cz-config.cjs" } + }, + "overrides": { + "@cypress/request": { + "form-data": "2.5.4" + } } -} +} \ No newline at end of file