search

alexandear / import-gitlab-commits

Import commits from a private GitLab repository in an anonymized way.
MIT License
161 stars 14 forks source link

Use the latest minor Go version #73

Closed alexandear closed 6 months ago

alexandear commented 6 months ago

This fixes govulncheck error:

Scanning your code and 285 packages across 26 dependent modules for known vulnerabilities...

=== Symbol Results ===

Vulnerability #1: GO-2024-2824
    Malformed DNS message can cause infinite loop in net
  More info: https://pkg.go.dev/vuln/GO-2024-2824
  Standard library
    Found in: net@go1.22.2
    Fixed in: net@go1.22.3
    Example traces found:
Error:       #1: internal/gitlab.go:37:51: internal.GitLab.CurrentUser calls gitlab.UsersService.ListEmails, which eventually calls net.Dialer.DialContext

Your code is affected by 1 vulnerability from the Go standard library.
This scan also found 0 vulnerabilities in packages you import and 2
vulnerabilities in modules you require, but your code doesn't appear to call
these vulnerabilities.
Use '-show verbose' for more details.