From 4df61ebdc03a35174439596085243230f8544512 Mon Sep 17 00:00:00 2001 From: Roman Babenko Date: Wed, 18 Dec 2024 07:53:54 +0200 Subject: [PATCH 01/10] version UP to 1.10.0 --- credsweeper/__init__.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/credsweeper/__init__.py b/credsweeper/__init__.py index c03923bf5..ebe783388 100644 --- a/credsweeper/__init__.py +++ b/credsweeper/__init__.py @@ -18,4 +18,4 @@ '__version__' ] -__version__ = "1.9.6" +__version__ = "1.10.0" From a846659413767510505ba59f0dac21e141c2efa2 Mon Sep 17 00:00:00 2001 From: Roman Babenko Date: Wed, 18 Dec 2024 07:55:03 +0200 Subject: [PATCH 02/10] Update SECURITY.md[no ci] --- SECURITY.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index 5d1fe818a..628c3763b 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -4,8 +4,8 @@ | Version | Supported | |---------|--------------------| -| 1.9.x | :white_check_mark: | -| <1.9.x | :x: | +| 1.10.x | :white_check_mark: | +| <1.10.x | :x: | ## Reporting a Vulnerability From b164a1dee86027e4a77ef994e05a719264cade31 Mon Sep 17 00:00:00 2001 From: Roman Babenko Date: Wed, 18 Dec 2024 13:10:55 +0200 Subject: [PATCH 03/10] Update depth_3.json[no ci] --- tests/data/depth_3.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/data/depth_3.json b/tests/data/depth_3.json index e7ac5671a..f0c4c2c15 100644 --- a/tests/data/depth_3.json +++ b/tests/data/depth_3.json @@ -13859,4 +13859,4 @@ } ] } -] \ No newline at end of file +] From f9ceed503a279fbc76760a3166ef56f5faf8ba51 Mon Sep 17 00:00:00 2001 From: Roman Babenko Date: Wed, 18 Dec 2024 13:11:09 +0200 Subject: [PATCH 04/10] Update doc.json[no ci] --- tests/data/doc.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/data/doc.json b/tests/data/doc.json index d63148d99..3684276cd 100644 --- a/tests/data/doc.json +++ b/tests/data/doc.json @@ -19486,4 +19486,4 @@ } ] } -] \ No newline at end of file +] From 445ab2c940fd9149167e3cbeef20537201ed0971 Mon Sep 17 00:00:00 2001 From: Roman Babenko Date: Wed, 18 Dec 2024 13:11:21 +0200 Subject: [PATCH 05/10] Update ml_threshold.json[no ci] --- tests/data/ml_threshold.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/data/ml_threshold.json b/tests/data/ml_threshold.json index 65565c086..b8d5aa894 100644 --- a/tests/data/ml_threshold.json +++ b/tests/data/ml_threshold.json @@ -11424,4 +11424,4 @@ } ] } -] \ No newline at end of file +] From 127312cf2150fb62a9373cb0e63bbf97a74f0d9b Mon Sep 17 00:00:00 2001 From: Roman Babenko Date: Wed, 18 Dec 2024 13:11:35 +0200 Subject: [PATCH 06/10] Update output.json[no ci] --- tests/data/output.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/data/output.json b/tests/data/output.json index 4f6e4c81e..c2c06a5cd 100644 --- a/tests/data/output.json +++ b/tests/data/output.json @@ -10592,4 +10592,4 @@ } ] } -] \ No newline at end of file +] From 716cb028a6a02adb73b8ec60e470228f66fe100b Mon Sep 17 00:00:00 2001 From: Roman Babenko Date: Wed, 18 Dec 2024 13:13:41 +0200 Subject: [PATCH 07/10] Update ml_config.json[no ci] --- credsweeper/ml_model/ml_config.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/credsweeper/ml_model/ml_config.json b/credsweeper/ml_model/ml_config.json index feebbbec2..407bfa550 100644 --- a/credsweeper/ml_model/ml_config.json +++ b/credsweeper/ml_model/ml_config.json @@ -411,4 +411,4 @@ } } ] -} \ No newline at end of file +} From 2bd2258d7a3e20a71e9a4e6d6a8e263a181ba4dc Mon Sep 17 00:00:00 2001 From: Roman Babenko Date: Wed, 18 Dec 2024 13:16:57 +0200 Subject: [PATCH 08/10] Update check.yml --- .github/workflows/check.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml index 5c22d3a86..faf4337af 100644 --- a/.github/workflows/check.yml +++ b/.github/workflows/check.yml @@ -36,11 +36,12 @@ jobs: ref: ${{ github.event.pull_request.head.sha }} # # # ml_config & ml_model integrity - + # temporally ml_config.json without last byte = 0A md5sum ec3ac77a923fed769fd95d567ef75137 + - name: Check ml_model.onnx integrity if: ${{ always() && steps.code_checkout.conclusion == 'success' }} run: | - md5sum --binary credsweeper/ml_model/ml_config.json | grep ec3ac77a923fed769fd95d567ef75137 + md5sum --binary credsweeper/ml_model/ml_config.json | grep 092a588d5bebdac5136c4d01c87abf27 md5sum --binary credsweeper/ml_model/ml_model.onnx | grep a707745d781517556fd58890cb2812be # # # line ending From c65bdebf597a9b52b732601ced7fb292b43e07c2 Mon Sep 17 00:00:00 2001 From: Roman Babenko Date: Wed, 18 Dec 2024 17:19:58 +0200 Subject: [PATCH 09/10] fix --- .github/workflows/benchmark.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml index 11e71c1da..dcdfa25d1 100644 --- a/.github/workflows/benchmark.yml +++ b/.github/workflows/benchmark.yml @@ -408,8 +408,7 @@ jobs: mv meta ${{ github.workspace }}/CredData/ - name: Set up Python 3.10 - if: steps.cache-data.outputs.cache-hit != 'true' - uses: actions/setup-python@3542bca2639a428e1796aaa6a2ffef0c0f575566 # v3.1.4 + uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1 with: python-version: "3.10" From 1b89a499ce6c5421637ce8d5ac1f3acd2bc89fe5 Mon Sep 17 00:00:00 2001 From: Roman Babenko Date: Wed, 18 Dec 2024 17:52:15 +0200 Subject: [PATCH 10/10] Update check.yml --- .github/workflows/check.yml | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml index faf4337af..14b0305cf 100644 --- a/.github/workflows/check.yml +++ b/.github/workflows/check.yml @@ -35,10 +35,9 @@ jobs: fetch-depth: 0 ref: ${{ github.event.pull_request.head.sha }} - # # # ml_config & ml_model integrity - # temporally ml_config.json without last byte = 0A md5sum ec3ac77a923fed769fd95d567ef75137 + # # # integrity for train diagram match - - name: Check ml_model.onnx integrity + - name: Check ml_config.json and ml_model.onnx integrity if: ${{ always() && steps.code_checkout.conclusion == 'success' }} run: | md5sum --binary credsweeper/ml_model/ml_config.json | grep 092a588d5bebdac5136c4d01c87abf27 @@ -225,4 +224,9 @@ jobs: # check whether current version exists in the file grep $V SECURITY.md + # # # from https://github.com/step-security-bot/CredSweeper/commit/dbc01f2709c56f69e2d8fd717156385f42b7bbf5 + + - name: Dependency Review + uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5.0 + # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #