Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(sec): upgrade golang.org/x/sys to 0.1.0 #2984

Merged
merged 1 commit into from
Nov 20, 2023

Conversation

Huoxi-any
Copy link
Contributor

What happened?

There are 1 security vulnerabilities found in golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f

What did I do?

Upgrade golang.org/x/sys from v0.0.0-20220722155257-8c9f86f7a55f to 0.1.0 for vulnerability fix

What did you expect to happen?

Ideally, no insecure libs should be used.

How can we automate the detection of these types of issues?

By using the GitHub Actions configurations provided by murphysec, we can conduct automatic code security checks in our CI pipeline.

The specification of the pull request

PR Specification from OSCS

@codecov-commenter
Copy link

codecov-commenter commented Sep 6, 2023

Codecov Report

Merging #2984 (ebffdc0) into main (6c026bc) will not change coverage.
The diff coverage is n/a.

❗ Current head ebffdc0 differs from pull request most recent head d5a2b80. Consider uploading reports for the commit d5a2b80 to get more accurate results

❗ Your organization is not using the GitHub App Integration. As a result you may experience degraded service beginning May 15th. Please install the GitHub App Integration for your organization. Read more.

@@           Coverage Diff           @@
##             main    #2984   +/-   ##
=======================================
  Coverage   84.34%   84.34%           
=======================================
  Files          88       88           
  Lines        3986     3986           
=======================================
  Hits         3362     3362           
  Misses        448      448           
  Partials      176      176           

@dosubot dosubot bot added the LGTM label Nov 20, 2023
@Windfarer Windfarer merged commit 69a5f8c into go-kratos:main Nov 20, 2023
34 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants