Merge branch 'master' of github.com:RasaHQ/rasa

Author: alwx

.github/workflows/vulnerability-scan.yml

@@ -0,0 +1,43 @@
+name: Vulnerability Scan
+
+on:
+  schedule:
+    # Run once every day
+    - cron: '0 0 * * *'
+
+jobs:
+  scan:
+    name: Vulnerability scan
+    runs-on: ubuntu-latest
+
+    env:
+      DOCKERFILE: Dockerfile_with_poetry_lock
+
+    steps:
+    - name: Checkout git repository 🕝
+      uses: actions/checkout@v2
+
+    - name: Add poetry.lock 🔒
+      # Trivy depends on the presence of `poetry.lock` to scan Python dependencies
+      run: |
+        BASE_IMAGE=rasa/rasa:latest-full
+        docker pull $BASE_IMAGE
+
+        # Create Dockerfile which includes poetry.lock
+        tee -a $DOCKERFILE << END
+        FROM $BASE_IMAGE
+        COPY poetry.lock .
+        END
+
+        IMAGE_NAME=rasa/rasa:latest-scanned
+        docker build -f $DOCKERFILE -t $IMAGE_NAME .
+
+        echo "::set-env name=IMAGE_WITH_POETRY_LOCK::$IMAGE_NAME"
+
+    - name: Scan image 🕵️‍♀️🕵️‍♂️
+      uses: homoluctus/[email protected]
+      with:
+        # Needs the token so it can create an issue once a vulnerability was found
+        token: ${{ secrets.GITHUB_TOKEN }}
+        image: ${{ env.IMAGE_WITH_POETRY_LOCK }}
+        ignore_unfixed: true

Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.6-slim as base
+FROM python:3.7-slim as base
 
 RUN apt-get update -qq \
  && apt-get install -y --no-install-recommends \

changelog/5544.improvment.rst renamed to changelog/5544.improvement.rst

@@ -0,0 +1 @@
+All Rasa Open Source images are now using Python 3.7 instead of Python 3.6.

changelog/5627.improvement.rst

@@ -0,0 +1,2 @@
+``DIETClassifier`` only counts as extractor in ``rasa test`` if it was actually trained for entity recognition.
+

changelog/5646.improvement.rst

@@ -0,0 +1,4 @@
+Updated Python dependency ``ruamel.yaml`` to ``>=0.16``. We recommend to use at least
+``0.16.10`` due to the security issue
+`CVE-2019-20478 <https://nvd.nist.gov/vuln/detail/CVE-2019-20478>`_ which is present in
+in prior versions.

changelog/5672.bugfix.rst

@@ -1,4 +1,4 @@
-FROM python:3.6-slim as base
+FROM python:3.7-slim as base
 
 RUN apt-get update -qq \
  && apt-get install -y --no-install-recommends \

docker/Dockerfile_full

@@ -1,4 +1,4 @@
-FROM python:3.6-slim as base
+FROM python:3.7-slim as base
 
 RUN apt-get update -qq \
  && apt-get install -y --no-install-recommends \

docker/Dockerfile_pretrained_embeddings_mitie_en

@@ -1,4 +1,4 @@
-FROM python:3.6-slim as base
+FROM python:3.7-slim as base
 
 RUN apt-get update -qq \
  && apt-get install -y --no-install-recommends \

docker/Dockerfile_pretrained_embeddings_spacy_de

@@ -1,4 +1,4 @@
-FROM python:3.6-slim as base
+FROM python:3.7-slim as base
 
 RUN apt-get update -qq \
  && apt-get install -y --no-install-recommends \