Skip to content

Clean filepath, fix dir permissions, update crypto version, pin setup-go commit sha - #73

Merged
andrew merged 2 commits into
chaoss:mainfrom
omkar-foss:fix-sec-issues
Aug 6, 2026
Merged

Clean filepath, fix dir permissions, update crypto version, pin setup-go commit sha#73
andrew merged 2 commits into
chaoss:mainfrom
omkar-foss:fix-sec-issues

Conversation

@omkar-foss

@omkar-foss omkar-foss commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Description

This PR cleans file path before reading in disclosure text command, and also uses appropriate permissions (750) for docs dir. Additionally updates golang/x/crypto version to the latest one (v0.54.0) and pins setup-go version used in action to v7.0.0 commit sha.

Notes for Reviewers

Signed commits

  • Yes, I signed my commits.

Generative AI disclosure

Please select one option:

  • This contribution was NOT assisted or created by Generative AI tools.
  • This contribution was assisted or created by Generative AI tools.

If AI tools were used, please provide details below:
- What tools were used?
- How were these tools used?
- Did you review these outputs before submitting this PR?

Signed-off-by: Omkar P <45419097+omkar-foss@users.noreply.github.com>
Signed-off-by: Omkar P <45419097+omkar-foss@users.noreply.github.com>
@omkar-foss omkar-foss changed the title Clean filepath, fix dir permissions, update crypto version Clean filepath, fix dir permissions, update crypto version, pin setup-go commit sha Aug 6, 2026

@andrew andrew left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Note .github/workflows/go.yml still has actions/setup-go@v5 unpinned — worth doing in a follow-up for consistency.

@andrew
andrew merged commit e22eb97 into chaoss:main Aug 6, 2026
3 checks passed
@omkar-foss
omkar-foss deleted the fix-sec-issues branch August 6, 2026 07:31
@omkar-foss

Copy link
Copy Markdown
Contributor Author

LGTM. Note .github/workflows/go.yml still has actions/setup-go@v5 unpinned — worth doing in a follow-up for consistency.

Thanks @andrew, I found some more unpinned, those are resolved in #75.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security Security related items

Projects

Development

Successfully merging this pull request may close these issues.

2 participants