Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Release: Merge back 2.40.3 into bugfix from: master-into-bugfix/2.40.3-2.41.0-dev #11324

Merged
merged 3 commits into from
Nov 25, 2024

Conversation

github-actions[bot]
Copy link
Contributor

Release triggered by rossops

DefectDojo release bot and others added 3 commits November 25, 2024 16:24
Copy link

dryrunsecurity bot commented Nov 25, 2024

DryRun Security Summary

This Pull Request updates the Helm chart version and the DefectDojo application version from 2.40.2 to 2.40.3, which do not directly impact the security of the application but should be reviewed periodically to ensure the overall security posture.

Expand for full summary

Summary:

The code changes in this Pull Request are related to updates to the Helm chart for the DefectDojo application and a minor version update to the dojo/__init__.py file. The Helm chart changes update the chart version, while the dojo/__init__.py file changes update the application version from "2.40.2" to "2.40.3".

From an application security perspective, these changes do not directly impact the security of the DefectDojo application itself. The Helm chart changes are related to the deployment and management of the application in a Kubernetes environment, and the dojo/__init__.py file changes are a routine update to the version number.

However, it's important to note that the overall security of the DefectDojo application should be reviewed periodically, as the application may be subject to security vulnerabilities or misconfigurations that could impact its security posture. Additionally, it's recommended to ensure that the Helm chart and its dependencies are regularly updated to the latest stable versions to address any known security vulnerabilities or issues.

Files Changed:

  1. helm/defectdojo/Chart.yaml: The changes in this file update the Helm chart version from "1.6.161-dev" to "1.6.162-dev". These changes are related to the deployment and management of the DefectDojo application in a Kubernetes environment and do not directly impact the application's security.

  2. dojo/__init__.py: The changes in this file update the __version__ variable from "2.40.2" to "2.40.3". This is a routine update to the application's version number and does not have any significant security implications.

Code Analysis

We ran 9 analyzers against 2 files and 0 analyzers had findings. 9 analyzers had no findings.

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

@rossops rossops closed this Nov 25, 2024
@rossops rossops reopened this Nov 25, 2024
@github-actions github-actions bot added the helm label Nov 25, 2024
@rossops rossops merged commit 4751052 into bugfix Nov 25, 2024
71 checks passed
@rossops rossops deleted the master-into-bugfix/2.40.3-2.41.0-dev branch November 25, 2024 17:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant