Skip to content

build(deps): bump github.com/aws/smithy-go from 1.27.8 to 1.28.1 - #302

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/aws/smithy-go-1.28.1
Open

build(deps): bump github.com/aws/smithy-go from 1.27.8 to 1.28.1#302
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/aws/smithy-go-1.28.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 5, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/aws/smithy-go from 1.27.8 to 1.28.1.

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-08-26)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.1
    • Bug Fix: Fix broken AddLogger middleware since its insert point was removed.

Release (2026-08-25.2)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.0
    • Feature: Set Content-Length inline when the request body is set via SetStream. The ComputeContentLength middleware is now deprecated.

Release (2026-08-25)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.10
    • Bug Fix: Fix a data race on the underlying writer when an event stream is closed while an event write is in flight.
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-21)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.9
    • Bug Fix: Fix a generic event stream exception not carrying the error code and message from its payload.
    • Bug Fix: Fix an event stream not being closed when its connection is lost, which would cause a caller writing to the stream to block indefinitely.
    • Bug Fix: Fix deserialization of an empty list producing a nil slice instead of an empty one.
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-14)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.8
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-07)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
build(deps): bump github.com/aws/smithy-go from 1.27.8 to 1.28.1
c3554d2 
Bumps [github.com/aws/smithy-go](https://github.com/aws/smithy-go) from 1.27.8 to 1.28.1.
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.27.8...v1.28.1)

---
updated-dependencies:
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 5, 2026
@dependabot dependabot Bot mentioned this pull request Sep 5, 2026
Closed
@github-actions

github-actions Bot commented Sep 5, 2026

Copy link
Copy Markdown

bulwark

  • ❌ scan — 2 govulncheck findings
error output 
… truncated to the last 20000 bytes — full log in the run artifact linked below …
p
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/internal/dbbackup/backup.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/internal/dbbackup/deploy.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/internal/dbbackup/install.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/ephemeral.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/internal/dbbackup/paths.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/internal/dbbackup/restore.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/internal/dbbackup/shell.go
[gosec] 2026/09/05 15:47:26 Import directory: /home/runner/work/inforge/inforge/internal/secretstore
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/ephemeral_down.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/ephemeral_reap.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/ephemeral_up.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/main.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/matrix.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/meshbaseline.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/pki.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/plugins.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/preview.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/release.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/releases.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/report.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/secret.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/service.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/servicecmds.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/serviceinspect.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/sshpush.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/stack.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/statelock.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/update.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/validate.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/cmd/inforge/version.go
[gosec] 2026/09/05 15:47:26 Checking package: r2
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/internal/r2/r2.go
[gosec] 2026/09/05 15:47:26 Import directory: /home/runner/work/inforge/inforge/internal/sizes
[gosec] 2026/09/05 15:47:26 Checking package: remote
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/internal/remote/remote.go
[gosec] 2026/09/05 15:47:26 Checking package: secretstore
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/internal/secretstore/age.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/internal/secretstore/store.go
[gosec] 2026/09/05 15:47:26 Import directory: /home/runner/work/inforge/inforge/internal/yamldoc
[gosec] 2026/09/05 15:47:26 Import directory: /home/runner/work/inforge/inforge/providers/cloudflare
[gosec] 2026/09/05 15:47:26 Import directory: /home/runner/work/inforge/inforge/internal/app
[gosec] 2026/09/05 15:47:26 Checking package: sizes
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/internal/sizes/sizes.go
[gosec] 2026/09/05 15:47:26 Import directory: /home/runner/work/inforge/inforge/internal/crowdsec
[gosec] 2026/09/05 15:47:26 Checking package: crowdsec
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/internal/crowdsec/install.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/internal/crowdsec/paths.go
[gosec] 2026/09/05 15:47:26 Checking package: yamldoc
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/internal/yamldoc/dsl.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/internal/yamldoc/env.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/internal/crowdsec/shell.go
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/internal/yamldoc/yamldoc.go
[gosec] 2026/09/05 15:47:26 Import directory: /home/runner/work/inforge/inforge/internal/grant
[gosec] 2026/09/05 15:47:26 Import directory: /home/runner/work/inforge/inforge/internal/meshpaths
[gosec] 2026/09/05 15:47:26 Checking package: meshpaths
[gosec] 2026/09/05 15:47:26 Checking file: /home/runner/work/inforge/inforge/internal/meshpaths/meshpaths.go
[gosec] 2026/09/05 15:47:26 Import directory: /home/runner/work/inforge/inforge/internal/types
[gosec] 2026/09/05 15:47:27 Checking package: app
[gosec] 2026/09/05 15:47:27 Checking file: /home/runner/work/inforge/inforge/internal/app/app.go
[gosec] 2026/09/05 15:47:27 Import directory: /home/runner/work/inforge/inforge/internal/validate
[gosec] 2026/09/05 15:47:28 Checking package: grant
[gosec] 2026/09/05 15:47:28 Checking file: /home/runner/work/inforge/inforge/internal/grant/database.go
[gosec] 2026/09/05 15:47:28 Checking file: /home/runner/work/inforge/inforge/internal/grant/grant.go
[gosec] 2026/09/05 15:47:28 Checking file: /home/runner/work/inforge/inforge/internal/grant/pki.go
[gosec] 2026/09/05 15:47:28 Checking package: types
[gosec] 2026/09/05 15:47:28 Checking file: /home/runner/work/inforge/inforge/internal/types/types.go
[gosec] 2026/09/05 15:47:28 Import directory: /home/runner/work/inforge/inforge/providers/hetzner
[gosec] 2026/09/05 15:47:28 Import directory: /home/runner/work/inforge/inforge/schemas
[gosec] 2026/09/05 15:47:28 Checking package: schemas
[gosec] 2026/09/05 15:47:28 Checking file: /home/runner/work/inforge/inforge/schemas/embed.go
[gosec] 2026/09/05 15:47:28 Import directory: /home/runner/work/inforge/inforge/internal/agehost
[gosec] 2026/09/05 15:47:29 Checking package: agehost
[gosec] 2026/09/05 15:47:29 Checking file: /home/runner/work/inforge/inforge/internal/agehost/agehost.go
[gosec] 2026/09/05 15:47:29 Import directory: /home/runner/work/inforge/inforge/internal/backupstore
[gosec] 2026/09/05 15:47:29 Checking package: validate
[gosec] 2026/09/05 15:47:29 Checking file: /home/runner/work/inforge/inforge/internal/validate/cidr.go
[gosec] 2026/09/05 15:47:29 Checking file: /home/runner/work/inforge/inforge/internal/validate/observability.go
[gosec] 2026/09/05 15:47:29 Checking file: /home/runner/work/inforge/inforge/internal/validate/security.go
[gosec] 2026/09/05 15:47:29 Checking file: /home/runner/work/inforge/inforge/internal/validate/source.go
[gosec] 2026/09/05 15:47:29 Checking file: /home/runner/work/inforge/inforge/internal/validate/validate.go
[gosec] 2026/09/05 15:47:29 Checking package: backupstore
[gosec] 2026/09/05 15:47:29 Checking file: /home/runner/work/inforge/inforge/internal/backupstore/store.go
[gosec] 2026/09/05 15:47:29 Import directory: /home/runner/work/inforge/inforge/internal/loader
[gosec] 2026/09/05 15:47:29 Import directory: /home/runner/work/inforge/inforge/internal/meshnginx
[gosec] 2026/09/05 15:47:30 Checking package: meshnginx
[gosec] 2026/09/05 15:47:30 Checking file: /home/runner/work/inforge/inforge/internal/meshnginx/egress.go
[gosec] 2026/09/05 15:47:30 Checking file: /home/runner/work/inforge/inforge/internal/meshnginx/ingress.go
[gosec] 2026/09/05 15:47:30 Checking file: /home/runner/work/inforge/inforge/internal/meshnginx/install.go
[gosec] 2026/09/05 15:47:30 Checking file: /home/runner/work/inforge/inforge/internal/meshnginx/render.go
[gosec] 2026/09/05 15:47:30 Import directory: /home/runner/work/inforge/inforge/program
[gosec] 2026/09/05 15:47:30 Checking package: hetzner
[gosec] 2026/09/05 15:47:30 Checking file: /home/runner/work/inforge/inforge/providers/hetzner/compute.go
[gosec] 2026/09/05 15:47:30 Checking file: /home/runner/work/inforge/inforge/providers/hetzner/mesh.go
[gosec] 2026/09/05 15:47:30 Checking file: /home/runner/work/inforge/inforge/providers/hetzner/network.go
[gosec] 2026/09/05 15:47:30 Checking file: /home/runner/work/inforge/inforge/providers/hetzner/regions.go
[gosec] 2026/09/05 15:47:30 Checking file: /home/runner/work/inforge/inforge/providers/hetzner/storage.go
[gosec] 2026/09/05 15:47:30 Checking file: /home/runner/work/inforge/inforge/providers/hetzner/tls.go
[gosec] 2026/09/05 15:47:31 Checking package: loader
[gosec] 2026/09/05 15:47:31 Checking file: /home/runner/work/inforge/inforge/internal/loader/loader.go
[gosec] 2026/09/05 15:47:31 Checking file: /home/runner/work/inforge/inforge/internal/loader/observability.go
[gosec] 2026/09/05 15:47:31 Import directory: /home/runner/work/inforge/inforge/cmd/inforge-agent
[gosec] 2026/09/05 15:47:31 Import directory: /home/runner/work/inforge/inforge/internal/aptlock
[gosec] 2026/09/05 15:47:31 Checking package: aptlock
[gosec] 2026/09/05 15:47:31 Checking file: /home/runner/work/inforge/inforge/internal/aptlock/aptlock.go
[gosec] 2026/09/05 15:47:31 Import directory: /home/runner/work/inforge/inforge/internal/release
[gosec] 2026/09/05 15:47:31 Checking package: main
[gosec] 2026/09/05 15:47:31 Checking file: /home/runner/work/inforge/inforge/cmd/inforge-agent/main.go
[gosec] 2026/09/05 15:47:31 Import directory: /home/runner/work/inforge/inforge/internal/service
[gosec] 2026/09/05 15:47:32 Checking package: release
[gosec] 2026/09/05 15:47:32 Checking file: /home/runner/work/inforge/inforge/internal/release/manifest.go
[gosec] 2026/09/05 15:47:32 Checking file: /home/runner/work/inforge/inforge/internal/release/store.go
[gosec] 2026/09/05 15:47:32 Checking package: service
[gosec] 2026/09/05 15:47:32 Checking file: /home/runner/work/inforge/inforge/internal/service/service.go
[gosec] 2026/09/05 15:47:33 Checking package: cloudflare
[gosec] 2026/09/05 15:47:33 Checking file: /home/runner/work/inforge/inforge/providers/cloudflare/dns.go
[gosec] 2026/09/05 15:47:34 Checking package: program
[gosec] 2026/09/05 15:47:34 Checking file: /home/runner/work/inforge/inforge/program/adr0042.go
[gosec] 2026/09/05 15:47:34 Checking file: /home/runner/work/inforge/inforge/program/dbbackup.go
[gosec] 2026/09/05 15:47:34 Checking file: /home/runner/work/inforge/inforge/program/dbcluster.go
[gosec] 2026/09/05 15:47:34 Checking file: /home/runner/work/inforge/inforge/program/dbdeploy.go
[gosec] 2026/09/05 15:47:34 Checking file: /home/runner/work/inforge/inforge/program/deploykey.go
[gosec] 2026/09/05 15:47:34 Checking file: /home/runner/work/inforge/inforge/program/encrypted.go
[gosec] 2026/09/05 15:47:34 Checking file: /home/runner/work/inforge/inforge/program/grafana.go
[gosec] 2026/09/05 15:47:34 Checking file: /home/runner/work/inforge/inforge/program/mesh.go
[gosec] 2026/09/05 15:47:34 Checking file: /home/runner/work/inforge/inforge/program/pkigrant.go
[gosec] 2026/09/05 15:47:34 Checking file: /home/runner/work/inforge/inforge/program/program.go
[gosec] 2026/09/05 15:47:35 Checking file: /home/runner/work/inforge/inforge/program/secretresolve.go
Results:


Summary:
  Gosec  : dev
  Files  : 138
  Lines  : 30994
  Nosec  : 45
  Issues : 0

go: downloading golang.org/x/vuln v1.7.0
go: downloading golang.org/x/telemetry v0.0.0-20260811182544-a038080d80e5
go: downloading golang.org/x/mod v0.39.0
go: downloading golang.org/x/tools v0.49.0
=== Symbol Results ===

Vulnerability #1: GO-2026-6355
    Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh
  More info: https://pkg.go.dev/vuln/GO-2026-6355
  Module: golang.org/x/crypto
    Found in: golang.org/x/crypto@v0.55.0
    Fixed in: golang.org/x/crypto@v0.56.0
    Example traces found:
      #1: cmd/inforge/stack.go:217:31: inforge.ephemeralWorkspace calls auto.NewLocalWorkspace, which eventually calls ssh.NewClientConn

Vulnerability #2: GO-2026-6354
    Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh
  More info: https://pkg.go.dev/vuln/GO-2026-6354
  Module: golang.org/x/crypto
    Found in: golang.org/x/crypto@v0.55.0
    Fixed in: golang.org/x/crypto@v0.56.0
    Example traces found:
      #1: cmd/inforge/stack.go:217:31: inforge.ephemeralWorkspace calls auto.NewLocalWorkspace, which eventually calls ssh.NewClientConn

Your code is affected by 2 vulnerabilities from 1 module.
This scan also found 0 vulnerabilities in packages you import and 1
vulnerability in modules you require, but your code doesn't appear to call these
vulnerabilities.
Use '-show verbose' for more details.
creating virtual environment...
installing semgrep from spec 'semgrep==1.173.0'...
done! ✨ 🌟 ✨
  installed package semgrep 1.173.0, installed using Python 3.12.3
  These apps are now available
    - pysemgrep
    - semgrep
                  
                  
┌────────────────┐
│ Debugging Info │
└────────────────┘
                  
  SCAN ENVIRONMENT
  versions    - semgrep 1.173.0 on python 3.12.3                                       
  environment - running in environment github-actions, triggering event is pull_request
Fixing git state for github action pull request
Not on head ref: c3554d275c6560f7ffb20630e4b9a24315de3c13; checking that out now.
            
  CONNECTION
Using b429a6cc71e5ac1730e904afc3d71d378b494c4d as the merge-base of b429a6cc71e5ac1730e904afc3d71d378b494c4d and c3554d275c6560f7ffb20630e4b9a24315de3c13
  Initializing scan (deployment=wardnet, scan_id=222646293)  
  Enabled products: Code, Supply Chain                               
        
  ENGINE
Semgrep Pro Engine will be installed in /opt/pipx/venvs/semgrep/lib/python3.12/site-packages/semgrep/bin/semgrep-core-proprietary
Downloading... ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 316.6/316.6 MB 101.0 MB/s 0:00:00
Successfully installed Semgrep Pro Engine (version 1.173.0)!

  Using git merge base detected from environment for diff scans: b429a6cc71e5ac1730e904afc3d71d378b494c4d
               
               
┌─────────────┐
│ Scan Status │
└─────────────┘
  Scanning 2 files tracked by git with 2944 Code rules, 1424 Supply Chain rules:
            
            
  CODE RULES
  Scanning 2 files with 47 <multilang> rules.
                    
  SUPPLY CHAIN RULES
                                                                                                                        
  Dependency Sources   Resolution Method   Ecosystem   Dependencies   Rules                                             
 ───────────────────────────────────────────────────────────────────────────                                            
  go.mod               Lockfile            Gomod       146             1424                                             
  website/yarn.lock    Skipped             Unknown     -                  -                                             
                                                                                                                        
                                                                                                                        
  Analysis       Rules                                                                                                  
 ──────────────────────                                                                                                 
  Basic            987                                                                                                  
  Reachability     417                                                                                                  
  Malicious         20                                                                                                  
                                                                                                                        
  Current version has 1 finding.

Creating git worktree from 'b429a6cc71e5ac1730e904afc3d71d378b494c4d' to scan baseline.
  Will report findings introduced by these commits (may be incomplete for shallow checkouts):
    * c3554d2 build(deps): bump github.com/aws/smithy-go from 1.27.8 to 1.28.1

               
               
┌─────────────┐
│ Scan Status │
└─────────────┘
  Scanning 1 file tracked by git with 1 Supply Chain rule:
            
            
  CODE RULES
  No code rules to run.
                    
  SUPPLY CHAIN RULES
                                                                                                                        
  Dependency Sources   Resolution Method   Ecosystem   Dependencies   Rules                                             
 ───────────────────────────────────────────────────────────────────────────                                            
  go.mod               Lockfile            Gomod       146                1                                             
                                                                                                                        
                                                                                                                        
  Analysis       Rules                                                                                                  
 ──────────────────────                                                                                                 
  Reachability       1                                                                                                  
                                                                                                                        
  Uploading scan results  
  Finalizing scan                         
                
┌──────────────┐
│ Scan Summary │
└──────────────┘
✅ CI scan completed successfully.
 • Findings: 0 (0 blocking)
 • Rules run: 114681
 • Targets scanned: 2
 • Parsed lines: ~100.0%
 • Scan skipped: 
   ◦ Matching --exclude patterns: 89
   ◦ Files matching .semgrepignore patterns: 124
 • Scan was limited to files changed since baseline commit.
 • For a detailed list of skipped files and lines, run semgrep with the --verbose flag
CI scan completed successfully.
  View results in Semgrep Cloud Platform:
    https://semgrep.dev/orgs/wardnet/findings?repo=wardnet/inforge&ref=refs/pull/302/merge
    https://semgrep.dev/orgs/wardnet/supply-chain/vulnerabilities?repo=wardnet/inforge&ref=refs/pull/302/merge
  No blocking findings so exiting with code 0

A new version of Semgrep is available. See https://semgrep.dev/docs/upgrading
[PASS] gosec
[FAIL] govulncheck
[PASS] semgrep
Error: 1 check(s) failed
bulwark: 1 check(s) failed
  • ✅ coverage — go: 67.3% (baseline 67.3%)

📦 Full bulwark output — complete scan and coverage logs.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants