AliyunContainerService / kube-eventer

kube-eventer emit kubernetes events to sinks
Apache License 2.0
1k stars 275 forks source link

Features/CVE fix 20240829 #295

Open yusheng-guo opened 1 month ago

yusheng-guo commented 1 month ago

What type of PR is this? PR类型是什么?

/kind bug /kind cleanup

What this PR does / why we need it: 这个PR解决了什么问题:

cve

Does this PR introduce a breaking change?: PR带来的破坏性变更:

Update dependencies.

Test/Final result: 测试/最终运行结果:

$ govulncheck -show verbose ./...
Scanning your code and 759 packages across 105 dependent modules for known vulnerabilities...

Fetching vulnerabilities from the database...

Checking the code against the vulnerabilities...

=== Symbol Results ===

No vulnerabilities found.

=== Package Results ===

No other vulnerabilities found.

=== Module Results ===

Vulnerability #1: GO-2022-0646
    Use of risky cryptographic algorithm in github.com/aws/aws-sdk-go
  More info: https://pkg.go.dev/vuln/GO-2022-0646
  Module: github.com/aws/aws-sdk-go
    Found in: github.com/aws/aws-sdk-go@v1.55.5
    Fixed in: N/A

Your code is affected by 0 vulnerabilities.
This scan also found 0 vulnerabilities in packages you import and 1
vulnerability in modules you require, but your code doesn't appear to call these
vulnerabilities.