search

Azure / azure-storage-blob-go

Microsoft Azure Blob Storage Library for Go
MIT License
156 stars 102 forks source link

Go mod dependency issue #286

Open bytewayio opened 3 years ago

bytewayio commented 3 years ago

Which version of the SDK was used?

0.14.0

Which platform are you using? (ex: Windows, Linux, Debian)

Mac & Linux

What problem was encountered?

github.com/dgrijalva/jwt-go: v3.2.0+incompatible Number of packages: 1 Known security vulnerability: 1 Security advisory: 0 Exploits: unavailable Highest severity: high Recommendation: v4.0.0-preview1

How can we reproduce the problem in the simplest way?

vscode + go extension + go mod extension

Have you found a mitigation/solution?

github.com/dgrijalva/jwt-go has been inactive for quite a long time, maybe switch to gopkg.in/square/go-jose.v2?

serprex commented 2 years ago

jwt-go is now maintained from https://github.com/golang-jwt/jwt which is what go-autorest is using but references to old repo remain in go.sum files