Merge pull request #205 from uktrade/LTD-4083-Fix-Gitpython-security-…

…advisory LTD-4083: Upgrade Gitpython to address a security issue flagged by dependabot
uktrade · Sep 6, 2023 · 222cb71 · 222cb71
2 parents d4020b6 + d4f6697
commit 222cb71
Show file tree

Hide file tree

Showing 5 changed files with 173 additions and 149 deletions.
diff --git a/.bandit b/.bandit
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -89,7 +89,7 @@ jobs:
       - run:
           name: Bandit
           command: |
-            pipenv run bandit -r .
+            pipenv run bandit -c bandit.yaml -r .
 
   check_background_tasks_up:
     machine:

diff --git a/Pipfile b/Pipfile
@@ -4,7 +4,7 @@ url = "https://pypi.org/simple"
 verify_ssl = true
 
 [dev-packages]
-bandit = "==1.6.2"
+bandit = "==1.6.3"
 black = "==22.3.0"
 coverage = "~=5.0"
 parameterized = "==0.7.0"