Sep 07, 2023
Working on upgrading some dependencies for security reasons to avoid the project getting flagged as vulnerable by internal tools.
However, when combining old jQuery, Typescript, Webpack and a bunch of other node modules it's easier said than done. At the moment I'm stuck at the E2E tests (Cypress).
There's an issue:
https://github.com/cypress-io/cypress/issues/27769
If you do get some pokes regarding vulnerable stuff they should all be false positives. Most of the vulnerabilities are invalid since BigIPReport does not have a backend web service, most of the code is static HTML.
Just keep track of this pages comments and update the docker images regurlarly as I update the base image dependencies and you're gonna do fine.
Kind regards,
Patrik