fix(Security): CVE-2020-26160 ibm-cloud-security#30

gary1998 · Feb 9, 2022 · 9b0fc1a · 9b0fc1a
1 parent 6cea994
commit 9b0fc1a
Show file tree

Hide file tree

Showing 11 changed files with 43 additions and 140 deletions.
diff --git a/README.md b/README.md
@@ -110,7 +110,7 @@ To provide credentials to the SDK, you supply either an IAM service **API key**
 
 ```go
 import (
-  "github.com/IBM/go-sdk-core/v3/core"
+  "github.com/IBM/go-sdk-core/v5/core"
   "github.com/ibm-cloud-security/security-advisor-sdk-go/v3/findingsapiv1"
   "github.com/ibm-cloud-security/security-advisor-sdk-go/v3/notificationsapiv1"
 )
@@ -140,7 +140,7 @@ For example, to send a header called `Custom-Header` to a call in  `notification
 
 ```go
 import (
-  "github.com/IBM/go-sdk-core/v3/core"
+  "github.com/IBM/go-sdk-core/v5/core"
   "github.com/ibm-cloud-security/security-advisor-sdk-go/v3/notificationsapiv1"
 )
 
@@ -168,7 +168,7 @@ If the method receives an error response from an API call to the service, it wil
 import (
  "fmt"
 
- "github.com/IBM/go-sdk-core/v3/core"
+ "github.com/IBM/go-sdk-core/v5/core"
  "github.com/ibm-cloud-security/security-advisor-sdk-go/v3/findingsapiv1"
 )
 
@@ -212,7 +212,7 @@ map[
 import (
  "fmt"
 
- "github.com/IBM/go-sdk-core/v3/core"
+ "github.com/IBM/go-sdk-core/v5/core"
  "github.com/ibm-cloud-security/security-advisor-sdk-go/v3/notificationsapiv1"
 )
 

diff --git a/examples/findingsapiv1/notes.go b/examples/findingsapiv1/notes.go
@@ -3,7 +3,7 @@ package examples
 import (
 	"fmt"
 
-	"github.com/IBM/go-sdk-core/v3/core"
+	"github.com/IBM/go-sdk-core/v5/core"
 	"github.com/ibm-cloud-security/security-advisor-sdk-go/v3/findingsapiv1"
 )
 

diff --git a/examples/findingsapiv1/occurrences.go b/examples/findingsapiv1/occurrences.go
@@ -3,7 +3,7 @@ package examples
 import (
 	"fmt"
 
-	"github.com/IBM/go-sdk-core/v3/core"
+	"github.com/IBM/go-sdk-core/v5/core"
 	"github.com/ibm-cloud-security/security-advisor-sdk-go/v3/findingsapiv1"
 )
 

diff --git a/examples/findingsapiv1/postGraph.go b/examples/findingsapiv1/postGraph.go
@@ -5,7 +5,7 @@ import (
 	"io/ioutil"
 	"strings"
 
-	"github.com/IBM/go-sdk-core/v3/core"
+	"github.com/IBM/go-sdk-core/v5/core"
 	"github.com/ibm-cloud-security/security-advisor-sdk-go/v3/findingsapiv1"
 )
 

diff --git a/examples/findingsapiv1/providers.go b/examples/findingsapiv1/providers.go
@@ -3,7 +3,7 @@ package examples
 import (
 	"fmt"
 
-	"github.com/IBM/go-sdk-core/v3/core"
+	"github.com/IBM/go-sdk-core/v5/core"
 	"github.com/ibm-cloud-security/security-advisor-sdk-go/v3/findingsapiv1"
 )
 

diff --git a/findingsapiv1/findings_api_v1.go b/findingsapiv1/findings_api_v1.go
@@ -21,7 +21,7 @@ import (
 	"fmt"
 	"io"
 
-	"github.com/IBM/go-sdk-core/v3/core"
+	"github.com/IBM/go-sdk-core/v5/core"
 	"github.com/go-openapi/strfmt"
 	common "github.com/ibm-cloud-security/security-advisor-sdk-go/v3/common"
 )

diff --git a/findingsapiv1/findings_api_v1_integration_test.go b/findingsapiv1/findings_api_v1_integration_test.go
@@ -12,7 +12,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/IBM/go-sdk-core/v3/core"
+	"github.com/IBM/go-sdk-core/v5/core"
 	"github.com/go-openapi/strfmt"
 	"github.com/ibm-cloud-security/security-advisor-sdk-go/v3/findingsapiv1"
 	"github.com/joho/godotenv"

diff --git a/findingsapiv1/findings_api_v1_test.go b/findingsapiv1/findings_api_v1_test.go
@@ -25,7 +25,7 @@ import (
 	"strings"
 	"time"
 
-	"github.com/IBM/go-sdk-core/v3/core"
+	"github.com/IBM/go-sdk-core/v5/core"
 	"github.com/go-openapi/strfmt"
 	"github.com/ibm-cloud-security/security-advisor-sdk-go/v3/findingsapiv1"
 	. "github.com/onsi/ginkgo"

diff --git a/go.mod b/go.mod
@@ -3,12 +3,10 @@ module github.com/ibm-cloud-security/security-advisor-sdk-go/v3
 go 1.14
 
 require (
-	github.com/IBM/go-sdk-core/v3 v3.3.1
-	github.com/IBM/go-sdk-core/v5 v5.3.0
-	github.com/go-openapi/strfmt v0.20.1
-	github.com/ibm-cloud-security/security-advisor-sdk-go/v2 v2.0.1
+	github.com/IBM/go-sdk-core/v5 v5.9.2
+	github.com/go-openapi/strfmt v0.21.1
 	github.com/joho/godotenv v1.3.0
 	github.com/onsi/ginkgo v1.14.2
-	github.com/onsi/gomega v1.10.3
-	github.com/stretchr/testify v1.6.1
+	github.com/onsi/gomega v1.10.5
+	github.com/stretchr/testify v1.7.0
 )
diff --git a/go.sum b/go.sum
diff --git a/notificationsapiv1/notifications_api_v1_integration_test.go b/notificationsapiv1/notifications_api_v1_integration_test.go
@@ -12,11 +12,11 @@ import (
 	"testing"
 	"time"
 
-	"github.com/IBM/go-sdk-core/v3/core"
+	"github.com/IBM/go-sdk-core/v5/core"
 	"github.com/joho/godotenv"
 	"github.com/stretchr/testify/assert"
 
-	"github.com/ibm-cloud-security/security-advisor-sdk-go/v2/notificationsapiv1"
+	"github.com/ibm-cloud-security/security-advisor-sdk-go/v3/notificationsapiv1"
 )
 
 var apiKey = os.Getenv("apiKey")
@@ -39,7 +39,7 @@ func shouldSkipTest(t *testing.T) {
 	}
 }
 
-func createChannelHelper(t *testing.T, path string) (*notificationsapiv1.CreateChannelsResponse, *notificationsapiv1.CreateNotificationChannelOptions, error) {
+func createChannelHelper(t *testing.T, path string) (*notificationsapiv1.ChannelInfo, *notificationsapiv1.CreateNotificationChannelOptions, error) {
 	headers := make(map[string]string)
 	headers["Content-Type"] = "application/json"