kernelci / kernelci/kernelci-api

Remove python-jose from dependencies

Open
#558 2 comments 0 reactions 0 assignees View on GitHub
bug critical
Dominant language
Python
Stars
10
Forks
21
PR merge metrics
No merged PRs in 30d

Description

@moto-timo mentioned that:
>Snyk is highlighting python-jose as having [High vulnerabilities](https://security.snyk.io/package/pip/python-jose). One of the suggested replacements is [PyJWT](https://pypi.org/project/PyJWT/).

We need to remove python-jose if possible.

Contributor guide

No contributing guide indexed for this repository

Research direction

Search the repository's dependency manifests and Python imports for python-jose, then inspect each usage to determine whether it can be removed or needs PyJWT. Confirm that python-jose is absent or replaced as appropriate, and run the relevant existing test suite to verify authentication behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
security
Issue type
Refactor
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.