fix: DataConnectors/AWS-SecurityHubFindings/requirements.txt to reduc…

…e vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-3164749 - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-5805047 - https://snyk.io/vuln/SNYK-PYTHON-PYJWT-2840625 - https://snyk.io/vuln/SNYK-PYTHON-WHEEL-3180413
tenable · Feb 5, 2024 · 337be75 · 337be75
1 parent 01feccb
commit 337be75
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/DataConnectors/AWS-SecurityHubFindings/requirements.txt b/DataConnectors/AWS-SecurityHubFindings/requirements.txt
@@ -20,4 +20,6 @@ pycrypto==2.6.1
 version-utils==0.2.2
 wheel==0.38.1
 zope.interface==4.1.1
-azure-identity==1.7.1
+azure-identity==1.7.1
+certifi>=2023.7.22 # not directly required, pinned by Snyk to avoid a vulnerability
+pyjwt>=2.4.0 # not directly required, pinned by Snyk to avoid a vulnerability