search

cyberark / summon

CLI that provides on-demand secrets access for common DevOps tools
https://cyberark.github.io/summon
MIT License
705 stars 63 forks source link

Replace gopkg.in/yaml.v2 v2.2.2 with v2.2.8 #236

Closed andytinkham closed 2 years ago

andytinkham commented 2 years ago

Signed-off-by: Andy Tinkham andy.tinkham@cyberark.com

Desired Outcome

Remove the usage of gopkg.in/yaml.v2 v2.2.2 in our dependency tree because of CVE-2019-11254 and SNYK-GOLANG-GOPKGINYAMLV2-1533594.

Implemented Changes

Added replace statement to go.mod to force usage of 2.2.8 instead of 2.2.2