gardener / machine-controller-manager

Declarative way of managing machines for Kubernetes cluster
Apache License 2.0
256 stars 117 forks source link

Remove use of go-git from Integration Tests #890

Closed elankath closed 7 months ago

elankath commented 9 months ago

How to categorize this issue?

/area security /kind cleanup /priority 2

What would you like to be added: Remove use of go-git from IT code and its vendoring.

Why is this needed: dependabot has bumped up go-git versions due to a security ticket which is causing alerts due to PGP key data in vendored tests. Since go-git is not a prime component of MCM and is only used to clone the repo in MCM tests, we can get rid of its use and vendoring. Use the git CLI to clone the MCM repo.