New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update vulnerable dependencies #155

Merged

sethvargo merged 1 commit into GoogleCloudPlatform:main from halamix2:security-vuln

Sep 15, 2023

Contributor

halamix2 commented Sep 15, 2023

Bumped dependecies that were marked insecure by Scorecard (https://github.com/ossf/scorecard) and Trivy (https://github.com/aquasecurity/trivy)

The vulnerable dependencies can also be automatically bumped with dependabot, similar to #154:

updates:
  - package-ecosystem: "gomod" # See documentation for possible values
    directory: "/" 
    schedule:
      interval: "daily"
    commit-message:
      prefix: "gomod"


          Update vulnerable dependencies

2ab5294

sethvargo merged commit f613d66 into GoogleCloudPlatform:main

2 checks passed

halamix2 deleted the security-vuln branch

September 15, 2023 22:16

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment