litellm/ci_cd
Alexsander Hamir 9f3de27fc9 Fix security vulnerabilities in Docker image and dependencies
- Update Dockerfile.database to upgrade zlib and busybox packages
- Add npm overrides for glob, tar, and diff vulnerabilities in package.json files
- Add jaraco-context>=6.1.0 to requirements.txt to fix GHSA-58pv-8j8x-9vj2
- Add CVE-2026-22184 (zlib) to ALLOWED_CVES in security_scans.sh for vulnerabilities without fixes

Fixes:
- Critical: zlib CVE-2026-22184 (no fix available, added to allowlist)
- High: glob (GHSA-5j98-mcp5-4vw2) - fixed via npm overrides
- High: jaraco-context (GHSA-58pv-8j8x-9vj2) - fixed via requirements.txt
- Medium: tar (GHSA-29xp-372q-xqph) - fixed via npm overrides
- Medium: busybox CVE-2025-60876 (no fix available, already in allowlist)
- Low: diff (GHSA-73rr-hh4g-fpgx) - fixed via npm overrides
2026-01-15 17:07:50 -08:00
..
.grype.yaml chore: document temporary grype ignore for CVE-2019-1010022 2026-01-13 10:09:23 +09:00
baseline_db.py Connect UI to "LiteLLM_DailyUserSpend" spend table - enables usage tab to work at 1m+ spend logs (#9603) 2025-03-27 23:29:15 -07:00
check_file_length.py (clean up) move docker files from root to docker folder (#6109) 2024-10-08 08:23:52 +05:30
check_files_match.py (fix) pre commit hook to sync backup context_window mapping 2024-02-05 15:03:04 -08:00
publish-proxy-extras.sh install prisma migration files - connects litellm proxy to litellm's prisma migration files (#9637) 2025-03-29 15:27:09 -07:00
run_migration.py install prisma migration files - connects litellm proxy to litellm's prisma migration files (#9637) 2025-03-29 15:27:09 -07:00
security_scans.sh Fix security vulnerabilities in Docker image and dependencies 2026-01-15 17:07:50 -08:00
security_scans_readme.md [Security] Ensure LiteLLM Images have 0 Critical, High, Medium vulnerabilities with CVSS ≥ 4.0 (#14357) 2025-09-08 16:49:52 -07:00
TEST_KEY_PATTERNS.md Fix CI: Revert security scan changes and add GitGuardian ignore rules (#18358) 2025-12-22 17:03:53 -08:00