Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix salus failures #389

Merged
merged 4 commits into from
May 1, 2023
Merged

Fix salus failures #389

merged 4 commits into from
May 1, 2023

Conversation

nmanoogian
Copy link
Member

@nmanoogian nmanoogian commented Apr 25, 2023

We started to notice errors from Salus relating to cargo-audit, which we don't use, so we now define the specific scanners for Salus to run.

The GitHub Action that we're using automatically pulls the latest Salus image which included some semgrep changes that seem to break with our custom rules. For this reason, I've also pulls semgrep into a separate step.

@nmanoogian nmanoogian force-pushed the nic/salus-fix branch 2 times, most recently from afc0920 to 637e29b Compare April 25, 2023 15:17
This fixes an error that we were seeing with `cargo-audit`, which we aren't using.
@nmanoogian nmanoogian force-pushed the nic/salus-fix branch 9 times, most recently from 9b9da2c to 2b760a2 Compare April 25, 2023 20:20
@nmanoogian nmanoogian marked this pull request as ready for review April 25, 2023 20:24
@nmanoogian nmanoogian force-pushed the nic/salus-fix branch 2 times, most recently from 16ec162 to 0ed36cc Compare April 25, 2023 20:30
Piccirello
Piccirello previously approved these changes Apr 28, 2023
pkg/http/http.go Outdated Show resolved Hide resolved
This notice appeared once we fixed the cargo-audit issue.
The latest version doesn't include any relevant fixes or improvements but I made the change during debugging and figured it would be a good change to keep.
@nmanoogian nmanoogian merged commit ebd6847 into master May 1, 2023
24 checks passed
@nmanoogian nmanoogian deleted the nic/salus-fix branch May 1, 2023 22:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants