Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
chore(deps): security update (#11975)
Scan output: Before update: | OSV URL | CVSS | ECOSYSTEM | PACKAGE | VERSION | SOURCE | |-------------------------------------|------|-----------|------------------------------|---------|--------| | https://osv.dev/GHSA-29wx-vh33-7x7r | 3.1 | Go | github.com/golang-jwt/jwt/v4 | 4.5.0 | go.mod | | https://osv.dev/GHSA-jw44-4f3j-q396 | | Go | helm.sh/helm/v3 | 3.14.2 | go.mod | |-------------------------------------|------|-----------|------------------------------|---------|--------| | Uncalled vulnerabilities | | | | | | |-------------------------------------|------|-----------|------------------------------|---------|--------| | https://osv.dev/GO-2022-0646 | | Go | github.com/aws/aws-sdk-go | 1.49.6 | go.mod | After update: | OSV URL | CVSS | ECOSYSTEM | PACKAGE | VERSION | SOURCE | |-------------------------------------|------|-----------|---------------------------|---------|--------| | https://osv.dev/GHSA-jw44-4f3j-q396 | | Go | helm.sh/helm/v3 | 3.14.2 | go.mod | |-------------------------------------|------|-----------|---------------------------|---------|--------| | Uncalled vulnerabilities | | | | | | |-------------------------------------|------|-----------|---------------------------|---------|--------| | https://osv.dev/GO-2022-0646 | | Go | github.com/aws/aws-sdk-go | 1.49.6 | go.mod | If a package is showing up in the scan but the script is not trying to update it then it might be because there is no fixed version yet. Signed-off-by: kumahq[bot] <110050114+kumahq[bot]@users.noreply.github.com> Co-authored-by: kumahq[bot] <110050114+kumahq[bot]@users.noreply.github.com>
- Loading branch information