🛡️ Security Scan Summary – 2025-08-31 18:46Z

[github-actions]

🛡️ Security Scan Summary

Repository: amirbiron/CodeBot
Default branch: main
Latest commit: e7d5834 by @amirbiron on 2025-08-31 18:42Z — Add Google Drive integration with OAuth and backup features (#356)

Link: Code Scanning

Open alerts summary:

• Critical: 4
• High: 22
• Medium: 35
• Low: 111
• Warning: 0
• Error: 0
• Note: 2
• Unknown: 0

Total: 174

Trivy FS (CRITICAL/HIGH)

requirements.txt (pip)
======================
Total: 1 (HIGH: 1, CRITICAL: 0)

┌─────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────┐
│ Library │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                      Title                      │
├─────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────┤
│ Pillow  │ CVE-2024-28219 │ HIGH     │ fixed  │ 10.2.0            │ 10.3.0        │ python-pillow: buffer overflow in _imagingcms.c │
│         │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-28219      │
└─────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────┘

Trivy Image python:3.11-alpine (CRITICAL/HIGH)

app:scan (alpine 3.20.6)
========================
Total: 0 (HIGH: 0, CRITICAL: 0)


Python (python-pkg)
===================
Total: 1 (HIGH: 1, CRITICAL: 0)

┌───────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────┐
│      Library      │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                      Title                      │
├───────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────┤
│ pillow (METADATA) │ CVE-2024-28219 │ HIGH     │ fixed  │ 10.2.0            │ 10.3.0        │ python-pillow: buffer overflow in _imagingcms.c │
│                   │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-28219      │
└───────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────┘