fix CVE-2022-30636 crypto vulnerability #37
Annotations
10 errors and 2 warnings
validate
missing go.sum entry for module providing package golang.org/x/crypto/openpgp (imported by gopkg.in/src-d/go-git.v4); to add:
|
validate
missing go.sum entry for module providing package golang.org/x/crypto/openpgp/armor (imported by github.com/hashicorp/terraform/internal/getproviders); to add:
|
validate
missing go.sum entry for module providing package golang.org/x/crypto/openpgp/errors (imported by github.com/hashicorp/terraform/internal/getproviders); to add:
|
validate
missing go.sum entry for module providing package golang.org/x/crypto/bcrypt (imported by github.com/Masterminds/sprig/v3); to add:
|
validate
missing go.sum entry for module providing package golang.org/x/crypto/scrypt (imported by github.com/Masterminds/sprig/v3); to add:
|
validate
missing go.sum entry for module providing package golang.org/x/crypto/ssh/terminal (imported by k8s.io/client-go/plugin/pkg/client/auth/exec); to add:
|
validate
missing go.sum entry for module providing package golang.org/x/crypto/pkcs12 (imported by github.com/Azure/go-autorest/autorest/azure/auth); to add:
|
validate
missing go.sum entry for module providing package golang.org/x/crypto/ssh/agent (imported by github.com/xanzy/ssh-agent); to add:
|
validate
missing go.sum entry for module providing package golang.org/x/crypto/ssh (imported by gopkg.in/src-d/go-git.v4/plumbing/transport/ssh); to add:
|
validate
missing go.sum entry for module providing package golang.org/x/crypto/ssh/knownhosts (imported by gopkg.in/src-d/go-git.v4/plumbing/transport/ssh); to add:
|
validate
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, actions/setup-go@v4. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
validate
Failed to restore: "/usr/bin/tar" failed with error: The process '/usr/bin/tar' failed with exit code 2
|