Vulnerability Fixes for Go-Getter #507
Conversation
|
Thank you for your submission! We require that all contributors sign our Contributor License Agreement ("CLA") before we can accept the contribution. Read and sign the agreement Learn more about why HashiCorp requires a CLA and what the CLA includes Mohan Manikanta seems not to be a GitHub user. Have you signed the CLA already but the status is still pending? Recheck it. |
1 similar comment
|
Thank you for your submission! We require that all contributors sign our Contributor License Agreement ("CLA") before we can accept the contribution. Read and sign the agreement Learn more about why HashiCorp requires a CLA and what the CLA includes Mohan Manikanta seems not to be a GitHub user. Have you signed the CLA already but the status is still pending? Recheck it. |
HTTP/2 - x/net, gRPC, Protobuf dependencies in the go-getter repo have been updated as a part of the vulnerability remediation. The new changes support go version 1.18 and above and thus updated the tests version in go-getter.yml file.
Attached the file with the list of vulnerabilities that have been detected (govulncheck tool) and remediated.
go-getter-VulnerabilityScan.txt