Skip to content

Commit facd00b

Browse files
committed
build(jwt-cli): removing problematic package
jwt-cli has issues running headless in docker (see troyharvey/jwt-cli#37) and it pulls fast-jwt 1.5.1 which has two medium vulnerabilities (see https://osv.dev/GHSA-c2ff-88x2-x9pg and https://osv.dev/GHSA-gm45-q3v2-6cf8). Let's remove it for now unless someone asks for it.
1 parent 0416751 commit facd00b

File tree

3 files changed

+0
-142
lines changed

3 files changed

+0
-142
lines changed

json/docker-compose.test.yml

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,6 @@ services:
2525
jq --version # jq
2626
npx jslint --version # jslint
2727
npx jsonlint --help # jsonlint
28-
echo 'eyJhbGciOiJub25lIn0.e30.' | npx jwt-cli # checkov:skip=CKV_SECRET_9: [JSON Web Token]: not a real secret # jwt-cli
2928
mlr --version # miller
3029
npm --version # npm
3130
openssl --version # openssl

json/package-lock.json

Lines changed: 0 additions & 140 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

json/package.json

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,6 @@
44
"dependencies": {
55
"jslint": "0.12.1",
66
"jsonpath-plus": "10.3.0",
7-
"jwt-cli": "2.0.0",
87
"prettier": "3.6.2",
98
"prettyjson": "1.2.5",
109
"v8r": "5.1.0"

0 commit comments

Comments
 (0)