LoreMind/web/package.json at 177967af555082ca31b8985f7737486ca2fcdecf

ietm64/LoreMind

Fork 0

Files

IETM_FIXE\ietm6 177967af55

Build & Push Images / build (web) (push) Successful in 1m58s

Details

Build & Push Images / build (core) (push) Successful in 3m13s

Details

Build & Push Images / build-switcher (push) Successful in 22s

Details

Qualité & Sécurité / Web (ESLint · angular-eslint + sonarjs) (push) Successful in 43s

Details

Qualité & Sécurité / MegaLinter (PMD · Ruff · Bandit · gitleaks · hadolint) (push) Successful in 1m0s

Details

Build & Push Images / build (brain) (push) Successful in 1m12s

Details

Qualité & Sécurité / Trivy (CVE dépendances Maven / pip / npm) (push) Failing after 2m35s

Details

Sécurité : purge des 22 CVE remontées par Trivy (premier run du gate)

- core : overrides BOM Spring Boot — tomcat-embed 10.1.55 (3 CRITICAL dont
  bypass d'auth digest), jackson-databind 2.21.4 (exécution de code arbitraire),
  netty 4.1.135.Final (lot DoS/bypass hostname/DNS), postgresql 42.7.11
- web : Angular 21.2.16 → 21.2.17 (HttpTransferCache, DoS formatDate,
  DOM clobbering hydration) — package-lock régénéré (peer-deps exactes
  entre paquets @angular : montée impossible paquet par paquet)

Vérifié : test-compile core, build + tests web, re-scan Trivy local propr

2026-07-07 01:22:54 +02:00

1.7 KiB

Raw Blame History

View Raw

1.7 KiB Raw Blame History

1.7 KiB

Raw Blame History