fix: requirements/requirements.txt to reduce vulnerabilities (#70)

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-3164749 - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-5805047 - https://snyk.io/vuln/SNYK-PYTHON-PROTOBUF-3031740 - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-5595532 - https://snyk.io/vuln/SNYK-PYTHON-RSA-1038401 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412 Co-authored-by: snyk-bot <[email protected]>
yu-iskw · Oct 17, 2023 · ba42bcd · ba42bcd
1 parent acc056a
commit ba42bcd
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/requirements/requirements.txt b/requirements/requirements.txt
@@ -19,3 +19,8 @@ datamodel-code-generator==0.13.2
 python_jsonschema_objects==0.4.1
 bigquery-schema-generator==1.5
 deepmerge==0.3.0
+certifi>=2023.7.22 # not directly required, pinned by Snyk to avoid a vulnerability
+protobuf>=3.18.3 # not directly required, pinned by Snyk to avoid a vulnerability
+requests>=2.31.0 # not directly required, pinned by Snyk to avoid a vulnerability
+rsa>=4.7 # not directly required, pinned by Snyk to avoid a vulnerability
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability