deps: bump Azure/go-autorest to remove transitive jwt-go dependency

hashicorp / go-discover

Discover nodes in cloud environments

Mozilla Public License 2.0

563 stars 123 forks source link

Closed mikemorris closed 2 years ago

mikemorris commented 3 years ago

Refs https://github.com/Azure/go-autorest/pull/570, the vulnerability was not used in this implementation, but this avoids a false positive in security scans.

mikemorris commented 3 years ago

Working out of band on getting the CI provider credentials updated to get those tests passing.

jeffwidman commented 3 years ago

@mikemorris any update on this?

Would be great if fixed so our security scans stop flagging these.

hashicorp-cla commented 2 years ago

All committers have signed the CLA.