Use latest version of detect-secrets

* Signed-off-by: Asmy Sarasan <[email protected]>

updating dss package version

* Signed-off-by: Asmy Sarasan <[email protected]>

fixing travis build errors

* Signed-off-by: Asmy Sarasan <[email protected]>

refactor

* Signed-off-by: Asmy Sarasan <[email protected]>

reverting Python back to 3.9.7

* Updating .trivyignore to ignore vulnerabilities

Signed-off-by: Asmy Sarasan <[email protected]>

* Update lockfile

Signed-off-by: Victoria Miltcheva <[email protected]>

* Change python version and lock

Signed-off-by: Victoria Miltcheva <[email protected]>

Signed-off-by: Asmy Sarasan <[email protected]>
Signed-off-by: Victoria Miltcheva <[email protected]>
Co-authored-by: Victoria Miltcheva <[email protected]>

Author: Asmysaras

.trivyignore

@@ -1 +1,3 @@
 # trivy errors to ignore
+CVE-2022-40897
+CVE-2022-40898

Makefile

@@ -70,7 +70,7 @@ setup-deploy-tools:
 .PHONY: setup
 setup: setup-trivy setup-deploy-tools
 	pip install --upgrade pip
-	pip install pipenv
+	pip install "setuptools>=65.5.1" pipenv
 	PIP_IGNORE_INSTALLED=1 pipenv install --dev --deploy --ignore-pipfile
 
 	# download and install a few ibm cloud cli tools

Pipfile

@@ -33,7 +33,7 @@ gunicorn = "==20.1.0"
 gevent = "==21.12.0"
 pyjwt = "==2.4.0"
 ibm-db = "==3.1.1"
-detect-secrets = {ref = "0.13.1+ibm.55.dss", git = "https://github.com/ibm/detect-secrets.git"}
+detect-secrets = {ref = "0.13.1+ibm.56.dss", git = "https://github.com/ibm/detect-secrets.git"}
 pytest = "==7.2.0"
 
 [requires]