fix(sec): upgrade golang.org/x/net to 0.7.0 - Githubissues

open-falcon / falcon-plus

An open-source and enterprise-level monitoring system.

Apache License 2.0

7.26k stars 1.53k forks source link

fix(sec): upgrade golang.org/x/net to 0.7.0 #971

Open chncaption opened 1 year ago

chncaption commented 1 year ago

What happened？

There are 1 security vulnerabilities found in golang.org/x/net v0.0.0-20210525063256-abc453219eb5

CVE-2022-41723

What did I do？

Upgrade golang.org/x/net from v0.0.0-20210525063256-abc453219eb5 to 0.7.0 for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

How can we automate the detection of these types of issues?

By using the GitHub Actions configurations provided by murphysec, we can conduct automatic code security checks in our CI pipeline.

The specification of the pull request

PR Specification from OSCS