Repository navigation
fix(homepage): 라우팅·프록시 의존성 보안 업데이트 - #355
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
홈페이지 API의 남은 취약 의존성 path-to-regexp8.3.0 및 proxy-addr2.0.7을 각각8.4.2와2.0.8로 갱신합니다. 현재 앱에서 공지의 특수 라우트/신뢰 서브넷 조건은 발견되지 않았지만 수정 버전을 사용하도록 잠금 파일만 변경합니다.
검증: 실제 Dockerfile 이미지 빌드 성공. 네트워크·운영 자격증명 없이 Node20.20.2/default seccomp/no-new-privileges에서 health/count/JSON POST, gzip·deflate·br, malformed400, limit413, 없는 경로·잘못된 메서드404, query, 프록시 신뢰 서브넷 회귀 통과. npm ls 호환 의존성 확인, npm audit --omit=dev 알려진 취약점0. OS 및 frontend 전체 보안 판정은 아닙니다.
배포: CI가 양쪽 홈페이지 이미지를 빌드합니다. 기존 readiness/preStop10 유지, 이전 sha-d1b0450 rollback 가능. 새 이미지를 트래픽 없는 Pod에서 확인하고 외부 응답/지연 관찰 후 운영 반영합니다.