Failed security/synk check when creating a PR

Development
1

I get these errors when creating pull requests against the openmrs-module-webservices.rest repo. They are unrelated to changes I’ve made, and identify vulnerabilities in pom.xml files that are already in the master branch. Any ideas why this is happening?

Some checks were not successful
1 errored, 2 failing, and 10 successful checks
security/snyk - omod/pom.xml (openmrs) — Failed to detect issues
security/snyk - omod-1.11/pom.xml (openmrs) — 4136 new vulnerable dependency paths
security/snyk - omod-1.12/pom.xml (openmrs) — 8272 new vulnerable dependency paths
2

I think this is a way of ensuring that it gets fixed, by making noise for each new pull request.

@isears am sure you are interested in such. :slight_smile:

3

Yeah! Looks like some of our dependencies are getting out of date. I don’t think I have access to our snyk dashboard so I can’t see exactly what the problems are. Wouldn’t mind working on mitigating some of the more serious alerts if I get access though.

4

@isears PM me your email address to get access.

5

@isears you should now have an invitation to the admins group

6

I see it thanks :+1:

7

Thanks for looking into this!