search

ossf / package-analysis

Open Source Package Analysis
Apache License 2.0
733 stars 51 forks source link

Bump Go version to 1.21.5 and use version specified in go.mod in Github Actions #994

Closed maxfisher-g closed 9 months ago

maxfisher-g commented 10 months ago

Bumping to v1.21.5 resolves some security vulnerabilities found by OSV scanner.

Rather than duplicating the go version in all the Github Actions that use setup-go, just point them to look in the main go.mod file.