hyperledger / fabric-gateway

Go, Node and Java client API for Hyperledger Fabric v2.4+
https://hyperledger.github.io/fabric-gateway/
Apache License 2.0
154 stars 91 forks source link

Use latest Go release for Go vulnerability scan #571

Closed bestbeforetoday closed 1 year ago

bestbeforetoday commented 1 year ago

The Go version cached by actions/setup-go sometimes lags several days behind a Go patch release. This can cause vulnerabilities in Go standard libraries to be flagged that are already resolved in the latest Go patch release.

The Go vulnerability scan has been failing for a week due to a vulnerability that is already fixed in the latest Go patch release.