Azure / Azure/azure-functions-java-worker
Safer - Compatible Updates to Fix Vulnerable Dependencies
- 主要语言
- Java
- 星标
- 103
- 派生
- 74
- 平均合并
- 4 天 8 小时
- 30 天内合并 PR
- 2
描述
Hi there 👋,
I'm [Safer Bot](https://gitlab.com/lsi-ufcg/vulnerabilidades/safer)!
Safer is an open-source tool that automatically updates vulnerable dependencies to more secure and compatible versions. Our goal is to help maintainers keep their projects secure without breaking changes.
We ran Safer on your project at commit 533c048575bcc5352fbd47e0815cf6efdf03ed04 and identified dependency updates that reduce vulnerabilities while preserving stability. Safer uses a compatibility-aware heuristic to select the most appropriate versions for each dependency.
Safer Report Summary:
Number of dependencies with vulnerabilities:
Before: 1 After: 0
Number of vulnerabilities:
Before: 1 After: 0
Before execution, total vulnerabilities were:
Low: 0, Medium: 0, High: 1, Critical: 0
After execution, total vulnerabilities are:
Low: 0, Medium: 0, High: 0, Critical: 0
View the full Safer report [here](https://gist.github.com/safer-bot/b42f1052c55ab49b88d2f9717d4e5f3f).
I'm excited to contribute to the open source community with my tool and would be happy to assist with any questions or feedback.
Feel free to reply to this issue and I'll respond as soon as possible.
Thanks,
Safer Bot
贡献指南
调研方向
先查看链接的 Safer 报告和提交 533c048575bcc5352fbd47e0815cf6efdf03ed04,以确定存在漏洞的依赖项和建议的更新。然后检查仓库的依赖文件并运行现有测试套件;在不破坏兼容性的情况下移除高严重性漏洞即表示完成。
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- java
- 领域
- security
- Issue 类型
- 缺陷
- 难度
- 4/5
- 预计耗时
- 3-5 天
- 活跃度
- 停滞
- 描述清晰度
- 需要澄清
- 新手友好度
- 15/100