diff --git a/.gitignore b/.gitignore
index 4e638c85d7a..b2d313453b1 100644
--- a/.gitignore
+++ b/.gitignore
@@ -48,4 +48,3 @@ docs/source/tools/assets/
 .tfcache
 .env
 .python-version
-
diff --git a/.whitesource b/.whitesource
new file mode 100644
index 00000000000..82efef091d3
--- /dev/null
+++ b/.whitesource
@@ -0,0 +1,3 @@
+{
+  "settingsInheritedFrom": "brightcove/whitesource-config@main"
+}
\ No newline at end of file
diff --git a/requirements.txt b/requirements.txt
index 05d73f1ead6..5931ddcdfc3 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -11,7 +11,7 @@ charset-normalizer==2.0.12; python_full_version >= "3.6.0" and python_version >=
 click==8.1.2; python_version >= "3.7"
 colorama==0.4.4; python_version >= "3.7" and python_full_version < "3.0.0" and sys_platform == "win32" and platform_system == "Windows" and (python_version >= "3.6" and python_full_version < "3.0.0" or python_full_version >= "3.5.0" and python_version >= "3.6") and python_version < "4.0" or sys_platform == "win32" and python_version >= "3.7" and python_full_version >= "3.5.0" and platform_system == "Windows" and (python_version >= "3.6" and python_full_version < "3.0.0" or python_full_version >= "3.5.0" and python_version >= "3.6") and python_version < "4.0"
 coverage==5.5; (python_version >= "2.7" and python_full_version < "3.0.0") or (python_full_version >= "3.5.0" and python_version < "4")
-cryptography==36.0.2; sys_platform == "linux" and python_version >= "3.7"
+cryptography==39.0.1; sys_platform == "linux" and python_version >= "3.7"
 docutils==0.17.1; (python_version >= "2.7" and python_full_version < "3.0.0") or (python_full_version >= "3.5.0")
 execnet==1.9.0; python_version >= "3.6" and python_full_version < "3.0.0" and python_version < "4.0" or python_full_version >= "3.5.0" and python_version >= "3.6" and python_version < "4.0"
 flake8==3.9.2; (python_version >= "2.7" and python_full_version < "3.0.0") or (python_full_version >= "3.5.0")
diff --git a/tools/c7n_azure/requirements.txt b/tools/c7n_azure/requirements.txt
index 5acf8cea8f2..ff2a8192c16 100644
--- a/tools/c7n_azure/requirements.txt
+++ b/tools/c7n_azure/requirements.txt
@@ -67,7 +67,7 @@ cffi==1.15.0; python_version >= "3.6"
 charset-normalizer==2.0.12; python_full_version >= "3.6.0" and python_version >= "3.6"
 click==8.1.2; python_version >= "3.7"
 colorama==0.4.4; python_version >= "3.7" and python_full_version < "3.0.0" and platform_system == "Windows" or platform_system == "Windows" and python_version >= "3.7" and python_full_version >= "3.5.0"
-cryptography==36.0.2; python_version >= "3.6"
+cryptography==39.0.1; python_version >= "3.6"
 distlib==0.3.4
 idna==3.3; python_version >= "3.6" and python_full_version < "3.0.0" or python_full_version >= "3.6.0" and python_version >= "3.6"
 importlib-metadata==4.11.3; python_version < "3.8" and python_version >= "3.7"
diff --git a/tools/c7n_openstack/requirements.txt b/tools/c7n_openstack/requirements.txt
index 2f8dadf8fd3..3d9a92dd64c 100644
--- a/tools/c7n_openstack/requirements.txt
+++ b/tools/c7n_openstack/requirements.txt
@@ -2,7 +2,7 @@ appdirs==1.4.4; python_version >= "3.6"
 certifi==2021.10.8; python_version >= "3.6" and python_full_version < "3.0.0" or python_full_version >= "3.6.0" and python_version >= "3.6"
 cffi==1.15.0; python_version >= "3.6"
 charset-normalizer==2.0.12; python_full_version >= "3.6.0" and python_version >= "3.6"
-cryptography==36.0.2; python_version >= "3.6"
+cryptography==39.0.1; python_version >= "3.6"
 decorator==5.1.1; python_version >= "3.6"
 dogpile.cache==1.1.5; python_version >= "3.6"
 idna==3.3; python_version >= "3.6" and python_full_version < "3.0.0" or python_full_version >= "3.6.0" and python_version >= "3.6"