Repository navigation
fix(docs): update SECURITY.md dependency scanning to OSV-Scanner - #147
google-oss-prow[bot] merged 1 commit into
Conversation
pip-audit was replaced by the nightly OSV-Scanner workflow in kubeflow#30; SECURITY.md merged via kubeflow#14 still described the old setup. Follow-up promised on the kubeflow#30 review thread. Signed-off-by: Kartikeya Trivedi <kartikeyatrivedi4oct2004@gmail.com>
|
🎉 Welcome to the Kubeflow MCP Server! 🎉 Thanks for opening your first PR! We're happy to have you as part of our community 🚀 Here's what happens next:
Join the community:
Feel free to ask questions in the comments if you need any help or clarification! |
|
/ok-to-test |
|
/lgtm |
|
cc : @abhijeet-dhumal please review |
|
/lgtm |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: abhijeet-dhumal The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
4 participants
Description
One-line docs fix: SECURITY.md (merged via #14) still says
pip-auditruns in CI, but pip-audit was replaced by the nightly OSV-Scanner workflow in #30. This updates the Prevention Mechanisms line to describe the current setup — nightly scan ofuv.lock, findings in the Security tab, automated fix PRs (e.g. #137).Follow-up promised on the #30 review thread.
Type of Change
Checklist
make verify)Related Issues
Follow-up to #30 / #14