From 9a72be6d3d74f4b302533f9553883ecde4213071 Mon Sep 17 00:00:00 2001 From: Aravind Kumar Date: Mon, 8 Sep 2025 22:20:44 +0530 Subject: [PATCH 1/5] Delete secrets-scan.yml --- .github/workflows/secrets-scan.yml | 29 ----------------------------- 1 file changed, 29 deletions(-) delete mode 100644 .github/workflows/secrets-scan.yml diff --git a/.github/workflows/secrets-scan.yml b/.github/workflows/secrets-scan.yml deleted file mode 100644 index 049c02f..0000000 --- a/.github/workflows/secrets-scan.yml +++ /dev/null @@ -1,29 +0,0 @@ -name: Secrets Scan -on: - pull_request: - types: [opened, synchronize, reopened] -jobs: - security-secrets: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v4 - with: - fetch-depth: '2' - ref: '${{ github.event.pull_request.head.ref }}' - - run: | - git reset --soft HEAD~1 - - name: Install Talisman - run: | - # Download Talisman - wget https://github.com/thoughtworks/talisman/releases/download/v1.37.0/talisman_linux_amd64 -O talisman - - # Checksum verification - checksum=$(sha256sum ./talisman | awk '{print $1}') - if [ "$checksum" != "8e0ae8bb7b160bf10c4fa1448beb04a32a35e63505b3dddff74a092bccaaa7e4" ]; then exit 1; fi - - # Make it executable - chmod +x talisman - - name: Run talisman - run: | - # Run Talisman with the pre-commit hook - ./talisman --githook pre-commit \ No newline at end of file From f5ca6e916e658259cd0663412668581487f124ab Mon Sep 17 00:00:00 2001 From: Aravind Kumar Date: Mon, 8 Sep 2025 22:20:48 +0530 Subject: [PATCH 2/5] Updated codeowners --- CODEOWNERS | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/CODEOWNERS b/CODEOWNERS index 1be7e0d..0496bc6 100644 --- a/CODEOWNERS +++ b/CODEOWNERS @@ -1 +1,11 @@ -* @contentstack/security-admin +* @contentstack/devex-pr-reviewers + +.github/workflows/sca-scan.yml @contentstack/security-admin + +.github/workflows/codeql-anaylsis.yml @contentstack/security-admin + +**/.snyk @contentstack/security-admin + +.github/workflows/policy-scan.yml @contentstack/security-admin + +.github/workflows/issues-jira.yml @contentstack/security-admin From a41eb98e9a8f5abe046835c2ac38ee23143b9a67 Mon Sep 17 00:00:00 2001 From: "harshitha.d" Date: Mon, 5 Jan 2026 16:50:03 +0530 Subject: [PATCH 3/5] fix snyk issues --- .snyk | 4 ++++ LICENSE | 2 +- changelog.rst | 5 +++++ requirements.txt | 2 +- setup.py | 2 +- 5 files changed, 12 insertions(+), 3 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..ffeedcc --- /dev/null +++ b/.snyk @@ -0,0 +1,4 @@ +version: v1.3.3 +language-settings: + python: + version: "3.12" \ No newline at end of file diff --git a/LICENSE b/LICENSE index f6d74aa..becb635 100644 --- a/LICENSE +++ b/LICENSE @@ -1,4 +1,4 @@ -Copyright 2021-2025 Contentstack +Copyright 2021-2026 Contentstack Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: diff --git a/changelog.rst b/changelog.rst index 0d4ee3c..369e258 100644 --- a/changelog.rst +++ b/changelog.rst @@ -2,6 +2,11 @@ **CHANGELOG** ================ +*v1.3.3* +============ + +Bug Fix: Fixed security issues. + *v1.3.2* ============ diff --git a/requirements.txt b/requirements.txt index d83dc9f..5e2f3c0 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,4 +1,4 @@ -pip~=25.1.1 +pip~=25.2 setuptools==80.3.1 lxml~=5.4.0 ruff==0.11.5 \ No newline at end of file diff --git a/setup.py b/setup.py index 90f6d82..148ff2f 100644 --- a/setup.py +++ b/setup.py @@ -15,7 +15,7 @@ long_description_content_type="text/markdown", url="https://github.com/contentstack/contentstack-utils-python", license='MIT', - version='1.3.2', + version='1.3.3', install_requires=[ ], From e402efb6d9e8b9ae7c33c104144a3d7b9135c32c Mon Sep 17 00:00:00 2001 From: Aravind Kumar Date: Mon, 5 Jan 2026 17:49:10 +0530 Subject: [PATCH 4/5] Update .snyk --- .snyk | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/.snyk b/.snyk index ffeedcc..0e85a51 100644 --- a/.snyk +++ b/.snyk @@ -1,4 +1,3 @@ -version: v1.3.3 +version: v1.25.0 language-settings: - python: - version: "3.12" \ No newline at end of file + python: "3.13" From e31f13f4e5b9b64c9179d2f6cbcb6a5f6b1cd7c1 Mon Sep 17 00:00:00 2001 From: Aravind Kumar Date: Mon, 5 Jan 2026 17:49:24 +0530 Subject: [PATCH 5/5] Update .snyk --- .snyk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.snyk b/.snyk index 0e85a51..1fbf3b8 100644 --- a/.snyk +++ b/.snyk @@ -1,3 +1,3 @@ version: v1.25.0 language-settings: - python: "3.13" + python: "3.12"