diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..fab0b1b7 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,10 @@ +version: 2 +updates: + - package-ecosystem: github-actions + directory: / + schedule: + interval: weekly + open-pull-requests-limit: 5 + labels: + - dependencies + - github-actions diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index ea8746df..fdcdd2f4 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -46,7 +46,7 @@ jobs: # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v7 # Add any setup steps before running the `github/codeql-action/init` action. # This includes steps like installing compilers or runtimes (`actions/setup-node` @@ -56,7 +56,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v3 + uses: github/codeql-action/init@v4 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -84,6 +84,6 @@ jobs: exit 1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 + uses: github/codeql-action/analyze@v4 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/docker-latest.yml b/.github/workflows/docker-latest.yml index f8c422d3..3cbafb68 100644 --- a/.github/workflows/docker-latest.yml +++ b/.github/workflows/docker-latest.yml @@ -17,13 +17,13 @@ jobs: uses: actions/checkout@v7 - name: Set up QEMU - uses: docker/setup-qemu-action@v4 + uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v4 + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Login to DockerHub - uses: docker/login-action@v4 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_TOKEN }} diff --git a/.github/workflows/docker-release.yml b/.github/workflows/docker-release.yml index 9032f55a..f1c022b1 100644 --- a/.github/workflows/docker-release.yml +++ b/.github/workflows/docker-release.yml @@ -16,13 +16,13 @@ jobs: uses: actions/checkout@v7 - name: Set up QEMU - uses: docker/setup-qemu-action@v4 + uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v4 + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Login to DockerHub - uses: docker/login-action@v4 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_TOKEN }} diff --git a/.github/workflows/docker-test.yml b/.github/workflows/docker-test.yml index 4b041ac2..12bfd446 100644 --- a/.github/workflows/docker-test.yml +++ b/.github/workflows/docker-test.yml @@ -16,10 +16,10 @@ jobs: uses: actions/checkout@v7 - name: Set up QEMU - uses: docker/setup-qemu-action@v4 + uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v4 + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Build AMD64 image id: docker_build_amd diff --git a/.github/workflows/mobsf-test.yml b/.github/workflows/mobsf-test.yml index 4e0d4840..1bf464a9 100644 --- a/.github/workflows/mobsf-test.yml +++ b/.github/workflows/mobsf-test.yml @@ -22,9 +22,9 @@ jobs: runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v7 - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v3 + uses: actions/setup-python@v7 with: python-version: ${{ matrix.python-version }} @@ -70,7 +70,7 @@ jobs: poetry run python manage.py migrate poetry run python manage.py create_roles - - uses: actions/setup-java@v4 + - uses: actions/setup-java@v5 with: distribution: 'temurin' java-version: '21' diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml index 08a364b7..24092d11 100644 --- a/.github/workflows/python-publish.yml +++ b/.github/workflows/python-publish.yml @@ -13,9 +13,9 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v7 - name: Set up Python - uses: actions/setup-python@v3 + uses: actions/setup-python@v7 with: python-version: '3.x' - name: Install dependencies diff --git a/docker/docker-compose.yml b/docker/docker-compose.yml index 93f7f126..f265c4be 100644 --- a/docker/docker-compose.yml +++ b/docker/docker-compose.yml @@ -1,7 +1,7 @@ services: postgres: - image: "postgres:14" + image: "postgres:latest" restart: always deploy: resources: @@ -10,7 +10,7 @@ services: reservations: memory: 512M volumes: - - $HOME/MobSF/postgresql_data:/var/lib/postgresql/data + - $HOME/MobSF/postgresql_data:/var/lib/postgresql environment: - POSTGRES_USER=postgres - POSTGRES_PASSWORD=password diff --git a/docker/docker-compose_swarm.yml b/docker/docker-compose_swarm.yml index 0d98aa8a..a84dc47d 100644 --- a/docker/docker-compose_swarm.yml +++ b/docker/docker-compose_swarm.yml @@ -1,10 +1,10 @@ services: postgres: - image: "postgres:${POSTGRES_VERSION:-17.0-bookworm}" + image: "postgres:${POSTGRES_VERSION:-latest}" restart: always volumes: - - $HOME/MobSF/postgresql_data:/var/lib/postgresql/data + - $HOME/MobSF/postgresql_data:/var/lib/postgresql environment: - POSTGRES_USER=postgres - POSTGRES_PASSWORD_FILE=/run/secrets/mobsfDB_password diff --git a/mobsf/MobSF/init.py b/mobsf/MobSF/init.py index 60230ccb..6ed18976 100644 --- a/mobsf/MobSF/init.py +++ b/mobsf/MobSF/init.py @@ -18,7 +18,7 @@ from mobsf.install.windows.setup import windows_config_local logger = logging.getLogger(__name__) -VERSION = '4.5.1' +VERSION = '4.5.2' BANNER = r""" __ __ _ ____ _____ _ _ ____ | \/ | ___ | |__/ ___|| ___|_ _| || | | ___| diff --git a/pyproject.toml b/pyproject.toml index d45fa660..b96fdae7 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,6 +1,6 @@ [tool.poetry] name = "mobsf" -version = "4.5.1" +version = "4.5.2" description = "Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis." keywords = ["mobsf", "mobile security framework", "mobile security", "security tool", "static analysis", "dynamic analysis", "malware analysis"] authors = ["Ajin Abraham "]