Merge pull request #96 from SoftwareDefinedVehicle/security-fixes-ocaas

Fix ORT findings
eclipse-leda · May 2, 2023 · c1868fd · c1868fd
2 parents 69082f3 + 9fff392
commit c1868fd
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 2 deletions.
diff --git a/.ort.yml b/.ort.yml
@@ -262,6 +262,16 @@ curations:
     reason: "INCORRECT"
     comment: "The license of the scripts is Apache 2.0"
     concluded_license: "Apache-2.0"
+  - path: ".github/workflows/build-covesa-container.yml"
+    detected_license: "LicenseRef-scancode-biosl-4.0"
+    reason: "INCORRECT"
+    comment: "The license of the scripts is Apache 2.0"
+    concluded_license: "Apache-2.0"
+  - path: "resources/**"
+    detected_license: "LicenseRef-scancode-biosl-4.0"
+    reason: "INCORRECT"
+    comment: "The license of our docker resources is Apache 2.0"
+    concluded_license: "Apache-2.0"
   - path: "meta-virtualization/files/custom-licenses/Intel-ACPI"
     detected_license: "Intel-ACPI"
     reason: "DOCUMENTATION_OF"

diff --git a/resources/docker-snapshot/dockerfiles/container-metrics/requirements.txt b/resources/docker-snapshot/dockerfiles/container-metrics/requirements.txt
@@ -1,10 +1,10 @@
 click==8.1.3
-Flask==2.2.2
+Flask==2.3.2
 importlib-metadata==6.0.0
 itsdangerous==2.1.2
 Jinja2==3.1.2
 MarkupSafe==2.1.2
-Werkzeug==2.2.2
+Werkzeug==2.3.3
 zipp==3.12.1
 Flask-MQTT==1.1.1
 requests==2.28.2