search

k8snetworkplumbingwg / ovs-cni

Open vSwitch CNI plugin
Apache License 2.0
224 stars 71 forks source link

[release-0.29] CWE-476: Bump gopkg.in/yaml.v3 #297

Closed oshoval closed 1 year ago

oshoval commented 1 year ago

What this PR does / why we need it: CWE-476, CWE-400

https://security.snyk.io/vuln/SNYK-GOLANG-GOPKGINYAMLV3-2952714 https://security.snyk.io/vuln/SNYK-GOLANG-GOPKGINYAMLV3-2841557

Special notes for your reviewer:

Release note:

None
kubevirt-bot commented 1 year ago

@oshoval: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
pull-e2e-ovs-cni ac0d0ff85ece62718dc5db85ff33e57a5e43a866 link true /test pull-e2e-ovs-cni-0.29
Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository. I understand the commands that are listed [here](https://go.k8s.io/bot-commands).
oshoval commented 1 year ago

@phoracek Hi, ovs mirror tests are failing, are we allowed to ignore them on OVS repo itself ? not sure if it is due to the PR or not, they are flaky when used on main but dont know if they are also flaky on the repo itsef (i believe they are but dont know by heart)

phoracek commented 1 year ago

/lgtm /approve

The tests are known to be flaky. Does not seem to be related to this PR.

kubevirt-bot commented 1 year ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: oshoval, phoracek

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/k8snetworkplumbingwg/ovs-cni/blob/release-0.29/OWNERS)~~ [phoracek] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment
oshoval commented 1 year ago

can you please override the lane ?

phoracek commented 1 year ago

/override pull-e2e-ovs-cni

phoracek commented 1 year ago

/override pull-e2e-ovs-cni-0.29