Skip to content

fix(deps): clear vulnerabilities in task dependencies #22

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tembleking merged 3 commits into from
Oct 7, 2026
Merged

fix(deps): clear vulnerabilities in task dependencies #22

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
a3012c9
fix(deps): bump azure-pipelines-task-lib to 5.281.0 and override brac…
tembleking Oct 5, 2026
d42e429
chore: update flake inputs, tfx-cli to 0.24.2 and pinned GitHub Actions
tembleking Oct 5, 2026
7619543
chore: release 1.0.5
tembleking Oct 7, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions .github/workflows/ci-pull-request.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,18 +18,18 @@ jobs:
shell: nix develop --command bash {0}
steps:
- name: Checkout code
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

- name: Install Nix
uses: DeterminateSystems/nix-installer-action@ef8a148080ab6020fd15196c2084a2eea5ff2d25 # v22
uses: DeterminateSystems/nix-installer-action@3138316df39ed29be04236d7ffc686fa525866aa # v23

- name: Enable Nix cache
uses: DeterminateSystems/magic-nix-cache-action@908b263ff629f4cc17666315b7fd3ec127c6244d # v14
uses: DeterminateSystems/magic-nix-cache-action@84c0677f58dcedf3b91f8223ce36a9ea5b3c84b7 # v15
with:
use-flakehub: false

- name: Login to Azure DevOps
uses: azure/login@532459ea530d8321f2fb9bb10d1e0bcf23869a43 # v3.0.0
uses: azure/login@a641126d1b8aa4d1fa005f4f92df94a3a4c4c906 # v3.1.0
with:
client-id: ${{ secrets.AZURE_APPLICATION_CLIENT_ID }}
tenant-id: ${{ secrets.AZURE_TENANT_ID }}
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/main.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,15 +23,15 @@ jobs:
shell: nix develop --command bash {0}
steps:
- name: Checkout code
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
fetch-depth: 0 # Need history to compare versions

- name: Install Nix
uses: DeterminateSystems/nix-installer-action@ef8a148080ab6020fd15196c2084a2eea5ff2d25 # v22
uses: DeterminateSystems/nix-installer-action@3138316df39ed29be04236d7ffc686fa525866aa # v23

- name: Enable Nix cache
uses: DeterminateSystems/magic-nix-cache-action@908b263ff629f4cc17666315b7fd3ec127c6244d # v14
uses: DeterminateSystems/magic-nix-cache-action@84c0677f58dcedf3b91f8223ce36a9ea5b3c84b7 # v15
with:
use-flakehub: false

Expand All @@ -54,7 +54,7 @@ jobs:

- name: Login to Azure DevOps
if: steps.check_version.outputs.changed == 'true'
uses: azure/login@532459ea530d8321f2fb9bb10d1e0bcf23869a43 # v3.0.0
uses: azure/login@a641126d1b8aa4d1fa005f4f92df94a3a4c4c906 # v3.1.0
with:
client-id: ${{ secrets.AZURE_APPLICATION_CLIENT_ID }}
tenant-id: ${{ secrets.AZURE_TENANT_ID }}
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/sync-versions.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,17 +14,17 @@ jobs:
shell: nix develop --command bash {0}
steps:
- name: Checkout code
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
ref: ${{ github.head_ref }}
token: ${{ secrets.GITHUB_TOKEN }}
fetch-depth: 0

- name: Install Nix
uses: DeterminateSystems/nix-installer-action@ef8a148080ab6020fd15196c2084a2eea5ff2d25 # v22
uses: DeterminateSystems/nix-installer-action@3138316df39ed29be04236d7ffc686fa525866aa # v23

- name: Enable Nix cache
uses: DeterminateSystems/magic-nix-cache-action@908b263ff629f4cc17666315b7fd3ec127c6244d # v14
uses: DeterminateSystems/magic-nix-cache-action@84c0677f58dcedf3b91f8223ce36a9ea5b3c84b7 # v15
with:
use-flakehub: false

Expand Down
6 changes: 3 additions & 3 deletions flake.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

8 changes: 4 additions & 4 deletions nix/tfx-cli.nix
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,16 +7,16 @@
}:
buildNpmPackage rec {
pname = "tfx-cli";
version = "0.23.3";
version = "0.24.2";

src = fetchFromGitHub {
owner = "Microsoft";
repo = "tfs-cli";
rev = "3c12ccb53f3fd700224d0db4490ebc0613df0b7e";
hash = "sha256-gnADqxXmaweeaDzV3BTwVzHGjm7qZ4/QNWpx60iJLJ8=";
rev = "69cc3ea887ccb08fccc2b37ffeacc1bdb8dddb7c";
hash = "sha256-GXi/PNSzX3RRisX7rEXahu3sVldhee9IYMmaqx0JF+s=";
};

npmDepsHash = "sha256-wZS8UZNmiuk68NKe8FJzHgqtY9Fs7oZEZALtuB6HRS0=";
npmDepsHash = "sha256-sOraxuomTy6M+ws5I7TOYzdzTpAx+nUFcRT+tg0dfAk=";

# `npm run build` is `tsc -p .`; postbuild copies the bin entrypoint.
npmBuildScript = "build";
Expand Down
36 changes: 8 additions & 28 deletions package-lock.json
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

5 changes: 4 additions & 1 deletion package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,9 @@
{
"dependencies": {
"azure-pipelines-task-lib": "^5.2.11",
"azure-pipelines-task-lib": "^5.281.0",
"vss-web-extension-sdk": "^5.141.0"
},
"overrides": {
"brace-expansion": "^1.1.21"
}
}
68 changes: 18 additions & 50 deletions sysdig-cli-scan-task/package-lock.json
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

7 changes: 5 additions & 2 deletions sysdig-cli-scan-task/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "sysdig-cli-scan-task",
"version": "1.0.4",
"version": "1.0.5",
"description": "Sysdig Secure Scan Task",
"main": "index.js",
"scripts": {
Expand All @@ -20,12 +20,15 @@
"homepage": "https://github.com/sysdiglabs/sysdig-azure-devops-task.git#readme",
"dependencies": {
"@types/http-proxy-agent": "^4.0.1",
"azure-pipelines-task-lib": "^5.2.11",
"azure-pipelines-task-lib": "^5.281.0",
"https-proxy-agent": "^7.0.4"
},
"devDependencies": {
"@types/node": "^20.0.0",
"@types/q": "^1.5.5",
"typescript": "^5.0.0"
},
"overrides": {
"brace-expansion": "^1.1.21"
}
}
2 changes: 1 addition & 1 deletion sysdig-cli-scan-task/task.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@
"version": {
"Major": 1,
"Minor": 0,
"Patch": 4
"Patch": 5
},
"minimumAgentVersion": "3.232.1",
"groups": [
Expand Down
2 changes: 1 addition & 1 deletion vss-extension.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"manifestVersion": 1,
"id": "sysdig-cli-scan-task",
"name": "Sysdig CLI scanner",
"version": "1.0.4",
"version": "1.0.5",
"publisher": "SysdigDevOps",
"description": "Scan images with Sysdig Secure as part of your development pipeline.",
"public": true,
Expand Down
Loading