Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Enable vulnerability check for Go #112

Open
kaklakariada opened this issue Jul 17, 2023 · 0 comments
Open

Enable vulnerability check for Go #112

kaklakariada opened this issue Jul 17, 2023 · 0 comments
Labels
refactoring Code improvement without behavior change

Comments

@kaklakariada
Copy link
Collaborator

kaklakariada commented Jul 17, 2023 •
edited
Loading

govulncheck (also see this blog post) can check Go dependencies for vulnerabilities. We should include it in our build.

The tool reports an issue in the http module of the Go runtime that is fixed in Go 1.20.6. So we also need to upgrade the Go version in the build. That is OK as downstream projects use Go 1.20.

go install golang.org/x/vuln/cmd/govulncheck@latest
govulncheck ./...
@kaklakariada kaklakariada added the refactoring Code improvement without behavior change label Jul 17, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
refactoring Code improvement without behavior change
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@kaklakariada