Skip to content

Fixed Trivy issue | Upgraded cloudflare/circl from 1.6.1 to 1.6.3 (AST-137976) #1439

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
cx-anurag-dalke merged 8 commits into from
Feb 27, 2026
Merged

Fixed Trivy issue | Upgraded cloudflare/circl from 1.6.1 to 1.6.3 (AST-137976) #1439

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
27e81af
- Version fixed for transitive dependency
cx-anjali-deore Jan 15, 2026
262cc8f
WIP: local changes
cx-anjali-deore Feb 6, 2026
022a3fc
Merge branch 'main' of https://github.com/Checkmarx/ast-cli
cx-anjali-deore Feb 17, 2026
dcb1f51
Merge branch 'main' of https://github.com/Checkmarx/ast-cli
cx-anjali-deore Feb 18, 2026
e475456
- Integration test cases with coverage
cx-anjali-deore Feb 27, 2026
d89ff33
- Removed unnecssay file got commited
cx-anjali-deore Feb 27, 2026
2008ecf
- Removed unnecssay file got commited
cx-anjali-deore Feb 27, 2026
514577b
Merge branch 'main' into other/Integration-tests
cx-anurag-dalke Feb 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -97,7 +97,7 @@ require (
github.com/charmbracelet/x/ansi v0.8.0 // indirect
github.com/charmbracelet/x/cellbuf v0.0.13 // indirect
github.com/charmbracelet/x/term v0.2.1 // indirect
github.com/cloudflare/circl v1.6.1 // indirect
github.com/cloudflare/circl v1.6.3 // indirect
github.com/containerd/cgroups/v3 v3.0.5 // indirect
github.com/containerd/containerd v1.7.29 // indirect
github.com/containerd/containerd/api v1.9.0 // indirect
Expand Down
4 changes: 2 additions & 2 deletions go.sum
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -235,8 +235,8 @@ github.com/chzyer/test v1.0.0/go.mod h1:2JlltgoNkt4TW/z9V/IzDdFaMTM2JPIi26O1pF38
github.com/circonus-labs/circonus-gometrics v2.3.1+incompatible/go.mod h1:nmEj6Dob7S7YxXgwXpfOuvO54S+tGdZdw9fuRZt25Ag=
github.com/circonus-labs/circonusllhist v0.1.3/go.mod h1:kMXHVDlOchFAehlya5ePtbp5jckzBHf4XRpQvBOLI+I=
github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
github.com/cloudflare/circl v1.6.1 h1:zqIqSPIndyBh1bjLVVDHMPpVKqp8Su/V+6MeDzzQBQ0=
github.com/cloudflare/circl v1.6.1/go.mod h1:uddAzsPgqdMAYatqJ0lsjX1oECcQLIlRpzZh3pJrofs=
github.com/cloudflare/circl v1.6.3 h1:9GPOhQGF9MCYUeXyMYlqTR6a5gTrgR/fBLXvUgtVcg8=
github.com/cloudflare/circl v1.6.3/go.mod h1:2eXP6Qfat4O/Yhh8BznvKnJ+uzEoTQ6jVKJRn81BiS4=
github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
github.com/cncf/udpa/go v0.0.0-20200629203442-efcf912fb354/go.mod h1:WmhPx2Nbnhtbo57+VJT5O0JRkEi1Wbu0z5j0R8u5Hbk=
github.com/cncf/udpa/go v0.0.0-20201120205902-5459f2c99403/go.mod h1:WmhPx2Nbnhtbo57+VJT5O0JRkEi1Wbu0z5j0R8u5Hbk=
Expand Down
4 changes: 3 additions & 1 deletion test/integration/data/manifests/requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ contourpy==1.3.1
# via matplotlib
c==0.12.1
# via matplotlib
fonttools==4.61.0
fonttools==4.61.0
# via matplotlib
kiwisolver==1.4.8
# via matplotlib
Expand Down Expand Up @@ -91,3 +91,5 @@ celery>=4.0,<5.0
gevent==21.8.0 # pinned to a known-good version

# Full-line comment below should be ignored


7 changes: 3 additions & 4 deletions test/integration/oss-realtime_test.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,15 +14,15 @@ import (
)

func TestOssRealtimeScan_RequirementsTxtFile_Success(t *testing.T) {
t.Skip() // Skip this test for now

configuration.LoadConfiguration()
_ = executeCmdNilAssertion(t, "Run OSS Realtime scan", "scan", "oss-realtime", "-s", "data/manifests/requirements.txt")
assert.True(t, validateCacheFileExist())
defer deleteCacheFile()
}

func TestOssRealtimeScan_PackageJsonFileWithVulnerablePackages_Success(t *testing.T) {
t.Skip() // Skip this test for now

args := []string{
"scan", "oss-realtime",
flag(commonParams.SourcesFlag), "data/manifests/package.json",
Expand All @@ -47,7 +47,7 @@ func TestOssRealtimeScan_PackageJsonFileWithVulnerablePackages_Success(t *testin
}

func TestOssRealtimeScan_PackageJsonFileWithoutPackages_SuccessWithEmptyResponse(t *testing.T) {
t.Skip()

args := []string{
"scan", "oss-realtime",
flag(commonParams.SourcesFlag), "data/manifests/no_dep_packageJson/package.json",
Expand All @@ -65,7 +65,6 @@ func TestOssRealtimeScan_PackageJsonFileWithoutPackages_SuccessWithEmptyResponse
}

func TestOssRealtimeScan_PackageJsonFile_Success(t *testing.T) {
t.Skip() // Skip this test for now
configuration.LoadConfiguration()
_ = executeCmdNilAssertion(t, "Run OSS Realtime scan", "scan", "oss-realtime", "-s", "data/manifests/package.json")
assert.True(t, validateCacheFileExist())
Expand Down
1 change: 0 additions & 1 deletion test/integration/telemetry_test.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,6 @@ import (
)

func TestTelemetryAI(t *testing.T) {
t.Skip()
bindKeysToEnvAndDefault(t)
args := []string{
"telemetry", "ai",
Expand Down
Loading