NetApp / harvest

Open-metrics endpoint for ONTAP and StorageGRID
https://netapp.github.io/harvest/latest
Apache License 2.0
146 stars 36 forks source link

ci: bump go #2965

Closed rahulguptajss closed 2 months ago

rahulguptajss commented 2 months ago

Vulnerability #1: GO-2024-2887 Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip More info: https://pkg.go.dev/vuln/GO-2024-2887 Standard library Found in: net/netip@go1.22.3 Fixed in: net/netip@go1.22.4 Example traces found:

1: pkg/util/util.go:140:23: util.FindLocalIP calls net.Dial, which eventually calls netip.Addr.IsLoopback

  #2: pkg/util/util.go:140:23: util.FindLocalIP calls net.Dial, which eventually calls netip.Addr.IsMulticast

Your code is affected by 1 vulnerability from the Go standard library. This scan also found 0 vulnerabilities in packages you import and 1 vulnerability in modules you require, but your code doesn't appear to call these vulnerabilities. Use '-show verbose' for more details. exit status 3 make: *** [govulncheck] Error 1