Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Incorrect $$VERSION value for swagger-ui-dist in distributed GitHub packages #10184

Open
jmasood2394 opened this issue Oct 30, 2024 · 0 comments

Comments

@jmasood2394
Copy link

Issue Description

I downloaded the swagger-ui zip file from this repository, and it includes the swagger-ui-dist package and installed it on my php fpm container using composer. However, when I checked the package.json, it shows the version as $$VERSION. This causes problems for security scanning tools (like Twistlock) as they cannot determine the actual version.

The vulnerability scanner reported two vulnerabilities fixed in swagger-ui-dist version 4.1.3, but I cannot confirm the version from the bundled files.

Steps to Reproduce

  1. Download the zip file from Releases.
  2. Extract the contents and navigate to the swagger-ui-dist folder.
  3. Check the package.json, where the version is shown as $$VERSION.

Expected Behavior

The swagger-ui-dist package should contain the correct version number in package.json to help with vulnerability checks and proper dependency management.

Actual Behavior

The package.json in the swagger-ui-dist directory contains "version": "$$VERSION".

Please advise on how to set the correct version for swagger-ui-dist in the composer file.

Thank you for your assistance.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant