chore(deps): bump github.com/ctfer-io/chall-manager from 0.0.0-20240712225233-7444c8e8803a to 0.1.3 in /deploy #405
Annotations
10 errors and 1 warning
|
go-lint:
cmd/chall-manager/main.go#L92
string `etcd` has 3 occurrences, make it a constant (goconst)
|
|
go-lint:
pkg/fs/common.go#L5
G501: Blocklisted import crypto/md5: weak cryptographic primitive (gosec)
|
|
go-lint:
pkg/fs/common.go#L23
G401: Use of weak cryptographic primitive (gosec)
|
|
go-lint:
pkg/iac/stack.go#L56
G306: Expect WriteFile permissions to be 0600 or less (gosec)
|
|
go-lint:
pkg/scenario/io.go#L53
G305: File traversal when extracting zip/tar archive (gosec)
|
|
go-lint:
pkg/scenario/io.go#L98
G110: Potential DoS vulnerability via decompression bomb (gosec)
|
|
go-lint:
api/v1/challenge/create.go#L5
G501: Blocklisted import crypto/md5: weak cryptographic primitive (gosec)
|
|
go-lint:
api/v1/challenge/create.go#L157
G401: Use of weak cryptographic primitive (gosec)
|
|
go-lint:
server/server.go#L146
G112: Potential Slowloris Attack because ReadHeaderTimeout is not configured in the http.Server (gosec)
|
|
go-lint:
pkg/errors/internal.go#L10
`embeded` is a misspelling of `embedded` (misspell)
|
|
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
Loading