Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Resolve security alerts #6

Closed
dim opened this issue Sep 19, 2023 · 4 comments
Closed

Resolve security alerts #6

dim opened this issue Sep 19, 2023 · 4 comments
Assignees
@ajn @dim @andyborn

Comments

@dim
Copy link
Member

dim commented Sep 19, 2023

No description provided.

@dim dim assigned ajn, dim and andyborn Sep 19, 2023
@dim
Copy link
Member Author

dim commented Sep 22, 2023

Still something going on https://github.com/bsm/go-benchmark/security/dependabot

@dim
Copy link
Member Author

dim commented Sep 22, 2023

Looks like a dep is importing an old lib. Which one is it?

@mxmCherry
Copy link
Contributor

Go doesn't seem to upgrade everything it sees in go.mod.

Looks like rm-ing go.mod's require section + rm-ing go.sum got rid of x/[email protected]

PR-ed in #13

@mxmCherry
Copy link
Contributor

Actually fixed by #14

Needed explicit go get -u PKGNAME for that, or it pulled stuff from other deps' deps.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@ajn ajn

@dim dim

@andyborn andyborn

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@ajn @dim @mxmCherry @andyborn