From d766a36dfc219c3b2bcdb362a8c70eaf92fc4533 Mon Sep 17 00:00:00 2001 From: awgreene Date: Thu, 19 Nov 2020 19:01:52 -0500 Subject: [PATCH] Update github action setup-go to version 1.1.3 Fixes a security vulnerability that allowed environment variables and path injection in workflows that log untrusted data to STDOUT, possibly resulting in environment variables being introducd or modified without the intention of the workflow operator. Ref: https://github.blog/changelog/2020-10-01-github-actions-deprecating-set-env-and-add-path-commands/ --- .github/workflows/go.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/go.yaml b/.github/workflows/go.yaml index 0845ed442..ddc10f1ad 100644 --- a/.github/workflows/go.yaml +++ b/.github/workflows/go.yaml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Set up Go 1.13 - uses: actions/setup-go@v1.1.2 + uses: actions/setup-go@v1.1.3 with: go-version: 1.13 id: go