Cherry pick #791 update golang.org/x/crypto to v0.17.0 and #764 update go version to 1.21.5 #166
dimsdeps.yml
on: pull_request
dependency-review
3s
govulncheck
50s
Annotations
10 errors and 1 warning
|
govulncheck
ecr.ExecPlugin.runPlugin calls ioutil.ReadAll, which eventually calls internal.chunkedReader.Read
|
|
govulncheck
aws.main calls cobra.Command.Execute, which eventually calls filepath.Abs
|
|
govulncheck
providers.init calls klog.init, which calls filepath.Base
|
|
govulncheck
tagging.Controller.Run calls wait.Until, which eventually calls filepath.Clean
|
|
govulncheck
aws.main calls cobra.Command.Execute, which eventually calls filepath.Dir
|
|
govulncheck
aws.init calls options.init, which eventually calls filepath.Join
|
|
govulncheck
providers.awsSdkEC2.RevokeSecurityGroupIngress calls ec2.EC2.RevokeSecurityGroupIngress, which eventually calls filepath.VolumeName
|
|
govulncheck
aws.main calls cobra.Command.Execute, which eventually calls filepath.Abs
|
|
govulncheck
providers.init calls klog.init, which calls filepath.Base
|
|
govulncheck
tagging.Controller.Run calls wait.Until, which eventually calls filepath.Clean
|
|
govulncheck
Both go-version and go-version-file inputs are specified, only go-version will be used
|