Accepting request 1118368 from home:jfkw:branches:devel:languages:go

- Update to version 2.18.1:
  * chore(deps): update all dependencies
  * Update gosec to version 2.18.1 in the action
  * Update cosign version to v2.2.0
  * Refactor how ignored issues are tracked
  * Restrict the maximum depth when tracking the slice bounds
  * Handle empty ssa results
  * Handle gracefully any panic that occurs when building the SSA representation of a package
  * Fix typo
  * Handle new function when getting the call info in case is overriden
  * Bump golang.org/x/net from 0.16.0 to 0.17.0 (#1037)
  * Update to Go 1.21.3 and 1.20.10 (#1035)
  * Update the list of unsafe functions detected by the unsafe rule (#1033)

OBS-URL: https://build.opensuse.org/request/show/1118368
OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/gosec?expand=0&rev=25
This commit is contained in:
Jeff Kowalczyk 2023-10-17 20:28:40 +00:00 committed by Git OBS Bridge
parent 6a366dca8c
commit 4a6b103660
7 changed files with 27 additions and 10 deletions

View File

@ -3,7 +3,7 @@
<param name="filename">gosec</param>
<param name="url">https://github.com/securego/gosec.git</param>
<param name="scm">git</param>
<param name="version">v2.18.0</param>
<param name="version">v2.18.1</param>
<param name="versionformat">@PARENT_TAG@</param>
<param name="versionrewrite-pattern">v(.*)</param>
<param name="versionrewrite-replacement">\1</param>

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:707983ecdee6ebfd8f602388245627bfeaa19ba660598246a26dd10326391b5f
size 625676

3
gosec-2.18.1.obscpio Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:b796b5b553af2002a2bd8c988ebfa992137f1bfb075fd96e3c37b2de33055597
size 627212

View File

@ -1,3 +1,20 @@
-------------------------------------------------------------------
Tue Oct 17 14:29:50 UTC 2023 - felix.niederwanger@suse.de
- Update to version 2.18.1:
* chore(deps): update all dependencies
* Update gosec to version 2.18.1 in the action
* Update cosign version to v2.2.0
* Refactor how ignored issues are tracked
* Restrict the maximum depth when tracking the slice bounds
* Handle empty ssa results
* Handle gracefully any panic that occurs when building the SSA representation of a package
* Fix typo
* Handle new function when getting the call info in case is overriden
* Bump golang.org/x/net from 0.16.0 to 0.17.0 (#1037)
* Update to Go 1.21.3 and 1.20.10 (#1035)
* Update the list of unsafe functions detected by the unsafe rule (#1033)
-------------------------------------------------------------------
Mon Oct 9 13:23:33 UTC 2023 - Jeff Kowalczyk <jkowalczyk@suse.com>

View File

@ -1,4 +1,4 @@
name: gosec
version: 2.18.0
mtime: 1696840672
commit: 3952187ea76579f7b405e90336a90a56114a4119
version: 2.18.1
mtime: 1697441383
commit: 7846db034c76684c31634ede659a92e5b3ffe2cc

View File

@ -17,7 +17,7 @@
Name: gosec
Version: 2.18.0
Version: 2.18.1
Release: 0
Summary: CLI tool to scan the Go AST and SSA code representations for security problems
License: Apache-2.0

View File

@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:f33061501a2579ae2390a12f31ca332a5a6c73662f1261f1e9028b69e82ad95d
size 4180913
oid sha256:1609021b2d8a01725131716f4548bc3bfa7f3f8ea948c117df2eefa905b2932a
size 4181515