chore: set unified python version (3.7) across all projects

README.md

@@ -32,14 +32,15 @@ See the following architecture of the app, generated by the [Diagrams](https://d
 Before deploying the vulnerable infrastructure, ensure you have the following prerequisites:
 
 - [AWS CLI](https://aws.amazon.com/cli/)
-- [Node.js](https://nodejs.org/)
-- [Poetry](https://python-poetry.org/)
+- [Node.js 18](https://nodejs.org/en/blog/release/v18.19.0)
+- [Python 3.7.16](https://www.python.org/downloads/release/python-3716/)
+- [Poetry ](https://python-poetry.org/)
 - [Docker](https://www.docker.com/)
 - [AWS CDK](https://aws.amazon.com/cdk/)
 
 ### Installation
 
-1. Clone this repository:
+1. Clone / Fork this repository:
 
    ```bash
    git clone https://github.com/avishayil/cdk-goat.git
@@ -111,6 +112,8 @@ See [DVPWA](cdk/containers/dvpwa/README.rst)
 
 All infrastructure, third parties and code vulnerabilities are powered by [Snyk](https://snyk.io) scanning utilities and uploaded to [GitHub Code Scanning](https://docs.github.com/en/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning) using the SARIF format. You can explore all of the vulnerabilities here: https://github.com/avishayil/cdk-goat/security/code-scanning
 
+If you're not forking the repository and running it in your own GitHub Actions pipeline, you can see all the vulnerabilities in the HTML reports attached as an assets to a GitHub release. For example, in version `1.0.0` here: https://github.com/avishayil/cdk-goat/releases/tag/v1.0.0
+
 ## Credits
 
 - [DVPWA](https://github.com/anxolerd/dvpwa) by [@anxolerd](https://github.com/anxolerd) (We stand with Ukraine! 🇺🇦🇺🇦🇺🇦)

cdk/pyproject.toml

@@ -6,7 +6,7 @@ authors = ["Avishay Bar  <[email protected]>"]
 packages = [{include = "cdk_goat_service"}]
 
 [tool.poetry.dependencies]
-python = "^3.8"
+python = "^3.7"
 aws-cdk-lib = ">=2.96.2"
 cdk_ecr_deployment = ">=2.5.6"
 constructs = ">=10.0.0"