Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Integrate govulncheck #8983

Closed
bt90 opened this issue Jul 14, 2023 · 0 comments
Closed

Integrate govulncheck #8983

bt90 opened this issue Jul 14, 2023 · 0 comments
Labels
build Issues caused by or requiring changes to the build system (scripts or Docker image)
Milestone
v1.23.7

Comments

@bt90
Copy link
Contributor

bt90 commented Jul 14, 2023

govulncheck is the official vulnerability checker provided by the go project: https://go.dev/blog/govulncheck

Github action: https://github.com/marketplace/actions/golang-govulncheck-action
@bt90 bt90 added enhancement New features or improvements of some kind, as opposed to a problem (bug) needs-triage New issues needed to be validated labels Jul 14, 2023
calmh added a commit that referenced this issue Jul 20, 2023
@calmh
build: Run govulncheck (fixes #8983)
a8eaea9
@calmh calmh closed this as completed in 4fe746d Jul 30, 2023
@calmh calmh added this to the v1.23.7 milestone Jul 31, 2023
@calmh calmh added build Issues caused by or requiring changes to the build system (scripts or Docker image) and removed enhancement New features or improvements of some kind, as opposed to a problem (bug) needs-triage New issues needed to be validated labels Jul 31, 2023
calmh added a commit to calmh/syncthing that referenced this issue Aug 3, 2023
@calmh
Merge branch 'main' into prometheus
9c2f1ef 
* main:
  build: Increase Go version to 1.20.7
  lib/config: Allow sharing already encrypted folder with untrusted devices (fixes syncthing#8965) (syncthing#9012)
  gui: Use case-insensive and backslash-agnostic versions filter (fixes syncthing#7973) (syncthing#8995)
  gui, man, authors: Update docs, translations, and contributors
  build: Run govulncheck (fixes syncthing#8983)
  build: Run build & tests on main branch nightly
  build: Send test logs to Grafana Loki for statistics
  all: Refactor the protocol/model interface a bit (ref syncthing#8981) (syncthing#9007)
  lib/connections: Fix building with `-tags noquic` (syncthing#9009)
  gui: Fix tooltips on buttons inside button groups (ref syncthing#7984) (syncthing#9008)
  cmd/strelaysrv: Handle accept error with debug set (fixes syncthing#9001) (syncthing#9004)
  lib/api: Fix data race in TestCSRFRequired (syncthing#9006)
  gui: Show full error for failed items (syncthing#9005)
  lib/api: Allow `Bearer` authentication style with API key (syncthing#9002)
calmh added a commit to calmh/syncthing that referenced this issue Aug 9, 2023
@calmh
Merge branch 'main' into multicon
99086c4 
* main:
  gui, man, authors: Update docs, translations, and contributors
  all: Add Prometheus-style metrics to expose some internal performance counters (fixes syncthing#5175) (syncthing#9003)
  build: Increase Go version to 1.20.7
  lib/config: Allow sharing already encrypted folder with untrusted devices (fixes syncthing#8965) (syncthing#9012)
  gui: Use case-insensive and backslash-agnostic versions filter (fixes syncthing#7973) (syncthing#8995)
  gui, man, authors: Update docs, translations, and contributors
  build: Run govulncheck (fixes syncthing#8983)
  build: Run build & tests on main branch nightly
  build: Send test logs to Grafana Loki for statistics
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
build Issues caused by or requiring changes to the build system (scripts or Docker image)
Projects
None yet
Milestone
v1.23.7
Development

No branches or pull requests
2 participants
@calmh @bt90