From 2c37605fe16293b9df86fe063d7d9001fee48237 Mon Sep 17 00:00:00 2001 From: pintergreg Date: Sun, 17 Nov 2024 10:24:55 +0100 Subject: [PATCH] Add vulnerability alert slide #36 --- lectures/16_automatization.md | 50 +++++++++++++++++++++++++++++++++++ lectures/wikipedia.bib | 7 +++++ 2 files changed, 57 insertions(+) diff --git a/lectures/16_automatization.md b/lectures/16_automatization.md index 782be74..82c89e7 100644 --- a/lectures/16_automatization.md +++ b/lectures/16_automatization.md @@ -551,6 +551,56 @@ just decrease the work by automatizing trivial tasks ::: +## vulnerability alerts + +:::::::::::: {.columns} +::::::::: {.column width="65%" .mt-3} +- Common Vulnerabilities and Exposures (CVE) + - a dictionary of common names (i.e., CVE Identifiers) for publicly known information security vulnerabilities [@enwiki:1256072917] +- GitHub [Dependabot](https://docs.github.com/en/code-security/getting-started/dependabot-quickstart-guide) + - uses package manager + - e.g., cargo (Rust), npm (JS), nuget (C#), maven (Java), pip (Python) + - checks dependencies for vulnerabilities + +::::::::: +::::::::: {.column width="35%" .text-smaller} +```toml +[tool.poetry.dependencies] +python = "^3.12" +numpy = "^1.26.3" +pandas = "^2.2" +geopandas = "^1.0" +networkx = "^3.2.1" +osmnx = "^1.6.0" +matplotlib = "^3.8.2" +seaborn = "^0.13.0" +contextily = "^1.3.0" +opencv-python = "^4.9.0" +pyaml = "^23.9.7" +pyogrio = "^0.7" +pyarrow = "^15.0.0" +scipy = "^1.12.0" +haversine = "^2.8.1" +mapclassify = "^2.6.1" +openpyxl = "^3.1.2" +ecomplexity = "^0.5.2" +structlog = "^24.1.0" +h3 = "^3.7.7" +pandarallel = "^1.6.5" +jinja2 = "^3.1.4" +tabulate = "^0.9.0" +``` +::: {.text-smaller} +Python dependencies managed by poetry +::: +::::::::: +:::::::::::: + +::: notes +GitLab also has a similar solution +::: + + # interruption :::::::::::: {.columns} diff --git a/lectures/wikipedia.bib b/lectures/wikipedia.bib index 81663c0..8b42881 100644 --- a/lectures/wikipedia.bib +++ b/lectures/wikipedia.bib @@ -204,3 +204,10 @@ @misc{enwiki:1253226188 howpublished = "\url{https://en.wikipedia.org/w/index.php?title=TeX&oldid=1253226188}", note = "[Online; accessed 15-November-2024]" } +@misc{enwiki:1256072917, + author = "{Wikipedia contributors}", + title = "Common Vulnerabilities and Exposures --- {Wikipedia}{,} The Free Encyclopedia", + year = "2024", + howpublished = "\url{https://en.wikipedia.org/w/index.php?title=Common_Vulnerabilities_and_Exposures&oldid=1256072917}", + note = "[Online; accessed 17-November-2024]" +}