fix: Go 1.27.3 and golang.org/x/crypto v0.58.0 (Trivy HIGH) #28

Merged
simlau merged 1 commit from simlau/deps-crypto into main 2026-10-28 09:20:16 +00:00
Owner

The v0.9.0 binary has 11 fixable HIGH findings in x/crypto v0.39.0 (ssh,
ssh/agent, knownhosts) and one in stdlib 1.27.2. Trivy on a linux/amd64
build of this commit: 0. The Holmes bot image ships levior for ci_run and
its scan blocks on these.

The v0.9.0 binary has 11 fixable HIGH findings in x/crypto v0.39.0 (ssh, ssh/agent, knownhosts) and one in stdlib 1.27.2. Trivy on a linux/amd64 build of this commit: 0. The Holmes bot image ships levior for ci_run and its scan blocks on these.
fix: Go 1.27.3 and golang.org/x/crypto v0.58.0 (Trivy HIGH)
All checks were successful
ci / image-build (pull_request) Successful in 6s
ci / test (pull_request) Successful in 1m49s
ci / image (pull_request) Has been skipped
ci / release (pull_request) Has been skipped
951e88f774
The v0.9.0 binary has 11 fixable HIGH findings in x/crypto v0.39.0 (ssh,
ssh/agent, knownhosts) and one in stdlib 1.27.2. Trivy on a linux/amd64
build of this commit: 0. The Holmes bot image ships levior for ci_run and
its scan blocks on these.
simlau merged commit 0be4d3442e into main 2026-10-28 09:20:16 +00:00
simlau deleted branch simlau/deps-crypto 2026-10-28 09:20:16 +00:00
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
levior/cli!28
No description provided.