Closed kevincobain2000 closed 1 year ago
When a new version of golang is released, I only use Gobrew to install it and switch to it. What can information about existing vulnerabilities in the version be used for?
Mostly the use case I imagined was to have it on the CI, similar to dependabot. As many of projects don’t update their versions on CI and go.mod upon EOL. I wanted those CI to fail when a limit of cve score has crossed.
It was just an idea at the moment.
Hi! What do you mean? What is it CVES?