projectcontour / contour-operator

Experimental repository to explore an operator for deploying Contour
Apache License 2.0
43 stars 34 forks source link

Bump gopkg.in/yaml.v3 to address CVE-2022-28948 #517

Closed tsaarni closed 2 years ago

tsaarni commented 2 years ago

Update gopkg.in/yaml.v3 to v3.0.1 to address CVE-2022-28948.

Signed-off-by: Tero Saarni tero.saarni@est.tech

codecov[bot] commented 2 years ago

Codecov Report

Merging #517 (953dcc9) into main (ef001b6) will decrease coverage by 2.49%. The diff coverage is n/a.

@@            Coverage Diff             @@
##             main     #517      +/-   ##
==========================================
- Coverage   80.07%   77.58%   -2.50%     
==========================================
  Files          29       29              
  Lines        2168     2168              
==========================================
- Hits         1736     1682      -54     
- Misses        309      349      +40     
- Partials      123      137      +14     
Impacted Files Coverage Δ
internal/status/status.go 48.64% <0.00%> (-24.33%) :arrow_down:
internal/objects/configmap/configmap.go 70.88% <0.00%> (-6.33%) :arrow_down:
internal/controller/controller.go 74.59% <0.00%> (-5.74%) :arrow_down:
internal/objects/contour/contour.go 76.62% <0.00%> (-5.20%) :arrow_down:
internal/objects/job/job.go 76.92% <0.00%> (-5.13%) :arrow_down:
internal/objects/service/service.go 84.82% <0.00%> (-4.47%) :arrow_down:
internal/objects/rbac.go 56.47% <0.00%> (-3.53%) :arrow_down:
internal/objects/deployment/deployment.go 91.98% <0.00%> (-2.11%) :arrow_down:
internal/objects/daemonset/daemonset.go 93.21% <0.00%> (-1.79%) :arrow_down:

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update ef001b6...953dcc9. Read the comment docs.