Silverfish/proton-bridge
1
0
Fork 1
mirror of https://github.com/ProtonMail/proton-bridge.git synced 2025-12-10 04:36:43 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat(GODT-3160): no need to ignore vulns

Browse Source
This commit is contained in:
Jakub
2024-01-24 10:30:30 +01:00
parent 374194c13b
commit 164fb23653
4 changed files with 2 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ci/setup.yml
View File

@ -2,6 +2,6 @@
include:
- project: 'go/bridge-internal'
ref: 'feat/godt-3160'
ref: 'master'
file: 'ci/runners-setup.yml'

1
ci/test.yml
View File

@ -134,7 +134,6 @@ go-vuln-check:
tags:
- shared-medium
script:
- apt-get -y install jq
- ./utils/govulncheck.sh
artifacts:
when: always

2
tests/collector_test.go
View File

@ -69,7 +69,7 @@ func awaitType[T events.Event](c *eventCollector, ofType T, timeout time.Duratio
return *new(T), false //nolint:gocritic
}
if eventT, ok := event.(T); !ok {
if eventT, ok := event.(T); ok {
return eventT, true
}

9
utils/govulncheck.sh
View File

@ -27,15 +27,6 @@ main(){
jq -r '.finding | select( (.osv != null) and (.trace[0].function != null) ) | .osv ' < vulns.json > vulns_osv_ids.txt
ignore GO-2023-2102 "GODT-3160 update go to 1.21.4"
ignore GO-2023-2043 "GODT-3160 update go to 1.21.4"
ignore GO-2023-2041 "GODT-3160 update go to 1.21.4"
ignore GO-2023-1878 "GODT-3160 update go to 1.21.4"
ignore GO-2023-1987 "GODT-3160 update go to 1.21.4"
ignore GO-2023-1840 "GODT-3160 update go to 1.21.4"
ignore GO-2023-2185 "GODT-3160 update go to 1.21.4"
ignore GO-2023-2186 "GODT-3160 update go to 1.21.4"
ignore GO-2023-2382 "GODT-3160 update go to 1.21.4"
ignore GO-2023-2328 "GODT-3124 RESTY race condition"
has_vulns