Skip to content

chore(dependecies): add tractusx_sdk dependency #124

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Apr 8, 2025
Merged

chore(dependecies): add tractusx_sdk dependency #124

Show file tree
Hide file tree
Changes from 3 commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
ea9eb49
chore: order alfabetically dependencies names
gomezbc Apr 1, 2025
17049c3
feat: add tructusx_sdk dependency from GitHub repository
gomezbc Apr 1, 2025
72315c5
chore: update versions of python to 3.12 for installing sdk
gomezbc Apr 1, 2025
834198d
fix: remove git from Dockerfile and set tractusx_sdk to 0.0.2
gomezbc Apr 8, 2025
fe21c65
fix: update tractusx_sdk license information to approved status
gomezbc Apr 8, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/dependencies-backend.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,7 +55,7 @@ jobs:
- name: Set up Python
uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
with:
python-version: '3.10'
python-version: '3.12'

- name: Create and activate virtual environment
run: |
Expand Down
3 changes: 3 additions & 0 deletions DEPENDENCIES_ICHUB-BACKEND
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,7 @@ pypi/pypi/-/Pygments/2.19.1, , approved, #19382
pypi/pypi/-/SQLAlchemy/2.0.38, MIT AND LGPL-2.0-only AND BSD-3-Clause AND LGPL-2.0-or-later, approved, #19392
pypi/pypi/-/annotated-types/0.7.0, MIT, approved, clearlydefined
pypi/pypi/-/anyio/4.8.0, MIT, approved, #19384
pypi/pypi/-/build/1.2.2.post1, MIT, approved, clearlydefined
pypi/pypi/-/certifi/2023.7.22, MPL-2.0, approved, #19826
pypi/pypi/-/cffi/1.17.1, MIT, approved, #19388
pypi/pypi/-/charset-normalizer/3.4.1, MIT AND (LGPL-2.1-only AND MIT) AND LGPL-2.1-only AND CC-BY-SA-3.0, approved, #19391
Expand Down Expand Up @@ -32,6 +33,7 @@ pypi/pypi/-/pluggy/1.5.0, MIT, approved, clearlydefined
pypi/pypi/-/pycparser/2.22, LGPL-2.0-or-later AND BSD-3-Clause, approved, #14636
pypi/pypi/-/pydantic/2.6.3, MIT, approved, #13069
pypi/pypi/-/pydantic_core/2.16.3, MIT, approved, clearlydefined
pypi/pypi/-/pyproject_hooks/1.2.0, MIT, approved, clearlydefined
pypi/pypi/-/pytest-asyncio/0.15.1, Apache-2.0, approved, clearlydefined
pypi/pypi/-/pytest/8.1.1, MIT, approved, #19365
pypi/pypi/-/python-dotenv/1.0.1, BSD-2-Clause AND BSD-3-Clause, approved, clearlydefined
Expand All @@ -47,6 +49,7 @@ pypi/pypi/-/sniffio/1.3.1, Apache-2.0 OR (Apache-2.0 AND MIT), approved, clearly
pypi/pypi/-/sqlmodel/0.0.22, MIT, approved, clearlydefined
pypi/pypi/-/starlette/0.40.0, BSD-2-Clause AND BSD-3-Clause, approved, clearlydefined
pypi/pypi/-/tomli/2.0.1, MIT, approved, #7824
pypi/pypi/-/tractusx_sdk/0.0.1, Apache-2.0 AND CC-BY-4.0 AND LicenseRef-scancode-generic-export-compliance, restricted, clearlydefined
pypi/pypi/-/typer/0.15.1, MIT, approved, clearlydefined
pypi/pypi/-/typing_extensions/4.12.2, Python-2.0, approved, #19383
pypi/pypi/-/urllib3/2.3.0, MIT AND Python-2.0 AND MPL-2.0, approved, #19863
Expand Down
4 changes: 2 additions & 2 deletions ichub-backend/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@
#################################################################################


FROM alpine:3.19
FROM alpine:3.21

Check warning on line 24 in ichub-backend/Dockerfile

View workflow job for this annotation

GitHub Actions / Analyze

[LOW] Healthcheck Instruction Missing 

Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

Check notice

Code scanning / KICS

Healthcheck Instruction Missing Note

Dockerfile doesn't contain instruction 'HEALTHCHECK'

USER root

Expand All @@ -34,7 +34,7 @@
RUN ls -la

## Install Python
RUN apk add python3 py3-pip libpq --no-cache
RUN apk add python3 py3-pip libpq git --no-cache

Check warning on line 37 in ichub-backend/Dockerfile

View workflow job for this annotation

GitHub Actions / Analyze

[MEDIUM] Unpinned Package Version in Apk Add 

Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes

## Install application requirements
RUN pip3 install --break-system-packages --no-cache-dir --upgrade -r ./requirements.txt
Expand All @@ -47,7 +47,7 @@
VOLUME ./data ./logs

## Create the directories
RUN mkdir -p ./logs

Check warning on line 50 in ichub-backend/Dockerfile

View workflow job for this annotation

GitHub Actions / Analyze

[LOW] Multiple RUN, ADD, COPY, Instructions Listed 

Multiple commands (RUN, COPY, ADD) should be grouped in order to reduce the number of layers.
RUN mkdir -p ./data

## Update user permissions
Expand Down
22 changes: 13 additions & 9 deletions ichub-backend/requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,6 @@
Jinja2==3.1.6
MarkupSafe==2.0.1
PyYAML==6.0.2
Pygments==2.19.1
SQLAlchemy==2.0.38
annotated-types==0.7.0
anyio==4.8.0
build==1.2.2.post1
certifi==2023.7.22
cffi==1.17.1
charset-normalizer==3.4.1
Expand All @@ -14,39 +10,47 @@ deprecation==2.1.0
dnspython==2.7.0
email_validator==2.2.0
exceptiongroup==1.2.2
fastapi==0.115.7
fastapi-cli==0.0.7
fastapi-keycloak-middleware==1.1.0
fastapi==0.115.7
greenlet==3.1.1
h11==0.14.0
httpcore==0.16.3
httptools==0.6.4
httpx==0.23.1
idna==3.3
iniconfig==2.0.0
Jinja2==3.1.4
jwcrypto==1.5.6
markdown-it-py==3.0.0
MarkupSafe==2.0.1
mdurl==0.1.2
packaging==24.1
pluggy==1.5.0
pycparser==2.22
pydantic==2.6.3
pydantic_core==2.16.3
pytest-asyncio==0.15.1
Pygments==2.19.1
pyproject_hooks==1.2.0
pytest==8.1.1
pytest-asyncio==0.15.1
python-dotenv==1.0.1
python-keycloak==4.0.1
python-multipart==0.0.20
requests-toolbelt==1.0.0
PyYAML==6.0.2
requests==2.32.3
requests-toolbelt==1.0.0
rfc3986==1.5.0
rich-toolkit==0.13.2
rich==13.9.4
rich-toolkit==0.13.2
setuptools==75.8.2
shellingham==1.5.4
sniffio==1.3.1
SQLAlchemy==2.0.38
sqlmodel==0.0.22
starlette==0.40.0
tomli==2.0.1
tractusx_sdk @ git+https://github.com/eclipse-tractusx/tractusx-sdk.git@07570bf2f345ae9c359a67ab4d1b8e154711d7ac
typer==0.15.1
typing_extensions==4.12.2
urllib3==2.3.0
Expand Down
Loading