fix(sec): upgrade golang.org/x/sys to 0.1.0 - Githubissues

p4gefau1t / trojan-go

Go实现的Trojan代理，支持多路复用/路由功能/CDN中转/Shadowsocks混淆插件，多平台，无依赖。A Trojan proxy written in Go. An unidentifiable mechanism that helps you bypass GFW. https://p4gefau1t.github.io/trojan-go/

GNU General Public License v3.0

7.54k stars 1.64k forks source link

fix(sec): upgrade golang.org/x/sys to 0.1.0 #519

Open chncaption opened 8 months ago

chncaption commented 8 months ago

What happened？

There are 1 security vulnerabilities found in golang.org/x/sys v0.0.0-20210820121016-41cdb8703e55

CVE-2022-29526

What did I do？

Upgrade golang.org/x/sys from v0.0.0-20210820121016-41cdb8703e55 to 0.1.0 for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

How can we automate the detection of these types of issues?

By using the GitHub Actions configurations provided by murphysec, we can conduct automatic code security checks in our CI pipeline.

The specification of the pull request

PR Specification from OSCS