Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Investigating Snyk complaints about go.mod #225

Closed
staheri14 opened this issue Jul 18, 2023 · 3 comments
Closed

Investigating Snyk complaints about go.mod #225

staheri14 opened this issue Jul 18, 2023 · 3 comments

Comments

@staheri14
Copy link
Collaborator

Problem

Starting from this PR, and following the addition of Snyk in the CIs, we have encountered failures in the CIs. These failures are occurring due to Snyk identifying 14 vulnerabilities in the go.mod changes.

For more details, please refer to the comment made by @rootulp:

Snyk claims this PR introduces 14 new vulnerabilities b/c the go.mod changes. I don't think we should block the PR on it though

This issue has been opened to track the problem and ensure that it is addressed, particularly if it is deemed to be a critical issue.

@rootulp
Copy link
Collaborator

rootulp commented Jul 18, 2023

Screenshot

Screenshot 2023-07-18 at 3 20 27 PM

there are more dependencies flagged by Snyk

@staheri14
Copy link
Collaborator Author

Based on this recent test PR, It seems that Snyk has been disintegrated from this repo, if that is the case, then this issue is no longer needed and can be closed
ccing @rootulp for confirmation

@rootulp
Copy link
Collaborator

rootulp commented Dec 4, 2023

yes please, good catch! Let's close as won't fix.

@rootulp rootulp closed this as not planned Won't fix, can't repro, duplicate, stale Dec 4, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants