Skip to content

build(deps): bump github.com/aws/smithy-go from 1.27.3 to 1.27.8 - #285

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/aws/smithy-go-1.27.8
Open

build(deps): bump github.com/aws/smithy-go from 1.27.3 to 1.27.8#285
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/aws/smithy-go-1.27.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 22, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/aws/smithy-go from 1.27.3 to 1.27.8.

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-08-21)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.9
    • Bug Fix: Fix a generic event stream exception not carrying the error code and message from its payload.
    • Bug Fix: Fix an event stream not being closed when its connection is lost, which would cause a caller writing to the stream to block indefinitely.
    • Bug Fix: Fix deserialization of an empty list producing a nil slice instead of an empty one.
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-14)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.8
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-07)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.7
    • Bug Fix: Don't serialize unset JSON documents as nil in structure members.
    • Bug Fix: Fix a deserialization panic around collection members in recursive shape configs.

Release (2026-07-31)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.6
    • Bug Fix: Fix failure to deserialize any @httpPayload struct with a non-string member.
    • Bug Fix: Fix failure to serialize any @httpPayload struct with a nested struct.

Release (2026-07-27)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.5
    • Bug Fix: Fix a performance issue in awsQuery with large response payloads.

... (truncated)

Commits
  • b6ea087 Release 2026-08-14
  • 496caee fix: drain response body before closing in CloseResponseBody (#696)
  • c589db5 Release 2026-08-07
  • 6a87093 pool byte buffers on deserialize + string arena (#693)
  • f391c60 fixup json snaps and deser (#692)
  • 1380d84 feat: move close-body, logger, and service-metadata work out of the middlewar...
  • d35099b fix schema-serde sparse collection deser to not point to the same value (#691)
  • adb847f Release 2026-07-31
  • 96461b2 fix bad http binding deser (#690)
  • 055e50f handle null cbor struct val (#689)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/aws/smithy-go](https://github.com/aws/smithy-go) from 1.27.3 to 1.27.8.
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.27.3...v1.27.8)

---
updated-dependencies:
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.27.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 22, 2026
@github-actions

Copy link
Copy Markdown

bulwark

  • scan — 2 govulncheck findings
error output
… truncated to the last 20000 bytes — full log in the run artifact linked below …
al/grafanaalert/grafanaalert.go
[gosec] 2026/08/22 15:44:55 Checking file: /home/runner/work/inforge/inforge/internal/grafanaalert/service.go
[gosec] 2026/08/22 15:44:55 Import directory: /home/runner/work/inforge/inforge/internal/meshcert
[gosec] 2026/08/22 15:44:56 Checking package: grafanadash
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/internal/grafanadash/crowdsec.go
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/internal/grafanadash/custom.go
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/internal/grafanadash/database.go
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/internal/grafanadash/grafanadash.go
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/internal/grafanadash/infrastructure.go
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/internal/grafanadash/service.go
[gosec] 2026/08/22 15:44:56 Import directory: /home/runner/work/inforge/inforge/internal/nginx
[gosec] 2026/08/22 15:44:56 Checking package: program
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/program/adr0042.go
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/program/dbbackup.go
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/program/dbcluster.go
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/program/dbdeploy.go
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/program/deploykey.go
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/program/encrypted.go
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/program/grafana.go
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/program/mesh.go
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/program/pkigrant.go
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/program/program.go
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/program/secretresolve.go
[gosec] 2026/08/22 15:44:56 Checking package: cloudflare
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/providers/cloudflare/dns.go
[gosec] 2026/08/22 15:44:56 Checking package: meshcert
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/internal/meshcert/meshcert.go
[gosec] 2026/08/22 15:44:56 Import directory: /home/runner/work/inforge/inforge/internal/service
[gosec] 2026/08/22 15:44:56 Import directory: /home/runner/work/inforge/inforge/internal/agehost
[gosec] 2026/08/22 15:44:56 Import directory: /home/runner/work/inforge/inforge/internal/agent
[gosec] 2026/08/22 15:44:56 Checking package: agehost
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/internal/agehost/agehost.go
[gosec] 2026/08/22 15:44:56 Import directory: /home/runner/work/inforge/inforge/internal/naming
[gosec] 2026/08/22 15:44:56 Checking package: nginx
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/internal/nginx/config.go
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/internal/nginx/install.go
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/internal/nginx/paths.go
[gosec] 2026/08/22 15:44:56 Import directory: /home/runner/work/inforge/inforge/internal/sizes
[gosec] 2026/08/22 15:44:56 Checking package: service
[gosec] 2026/08/22 15:44:56 Checking file: /home/runner/work/inforge/inforge/internal/service/service.go
[gosec] 2026/08/22 15:44:57 Import directory: /home/runner/work/inforge/inforge/internal/tags
[gosec] 2026/08/22 15:44:57 Checking package: agent
[gosec] 2026/08/22 15:44:57 Checking file: /home/runner/work/inforge/inforge/internal/agent/decrypt.go
[gosec] 2026/08/22 15:44:57 Checking file: /home/runner/work/inforge/inforge/internal/agent/descriptor.go
[gosec] 2026/08/22 15:44:57 Checking file: /home/runner/work/inforge/inforge/internal/agent/env.go
[gosec] 2026/08/22 15:44:57 Checking file: /home/runner/work/inforge/inforge/internal/agent/exec.go
[gosec] 2026/08/22 15:44:57 Checking file: /home/runner/work/inforge/inforge/internal/agent/meshdescriptor.go
[gosec] 2026/08/22 15:44:57 Checking file: /home/runner/work/inforge/inforge/internal/agent/passwd.go
[gosec] 2026/08/22 15:44:57 Checking file: /home/runner/work/inforge/inforge/internal/agent/project.go
[gosec] 2026/08/22 15:44:57 Checking file: /home/runner/work/inforge/inforge/internal/agent/run.go
[gosec] 2026/08/22 15:44:57 Import directory: /home/runner/work/inforge/inforge/internal/types
[gosec] 2026/08/22 15:44:57 Checking package: sizes
[gosec] 2026/08/22 15:44:57 Checking file: /home/runner/work/inforge/inforge/internal/sizes/sizes.go
[gosec] 2026/08/22 15:44:57 Import directory: /home/runner/work/inforge/inforge/internal/cloudinit
[gosec] 2026/08/22 15:44:57 Checking package: tags
[gosec] 2026/08/22 15:44:57 Checking file: /home/runner/work/inforge/inforge/internal/tags/tags.go
[gosec] 2026/08/22 15:44:57 Import directory: /home/runner/work/inforge/inforge/internal/manifest
[gosec] 2026/08/22 15:44:57 Checking package: cloudinit
[gosec] 2026/08/22 15:44:57 Checking file: /home/runner/work/inforge/inforge/internal/cloudinit/cloudinit.go
[gosec] 2026/08/22 15:44:57 Import directory: /home/runner/work/inforge/inforge/internal/pgrole
[gosec] 2026/08/22 15:44:57 Checking package: naming
[gosec] 2026/08/22 15:44:57 Checking file: /home/runner/work/inforge/inforge/internal/naming/naming.go
[gosec] 2026/08/22 15:44:57 Import directory: /home/runner/work/inforge/inforge/internal/r2
[gosec] 2026/08/22 15:44:57 Checking package: pgrole
[gosec] 2026/08/22 15:44:57 Checking file: /home/runner/work/inforge/inforge/internal/pgrole/pgrole.go
[gosec] 2026/08/22 15:44:57 Import directory: /home/runner/work/inforge/inforge/internal/regions
[gosec] 2026/08/22 15:44:57 Checking package: regions
[gosec] 2026/08/22 15:44:57 Checking file: /home/runner/work/inforge/inforge/internal/regions/regions.go
[gosec] 2026/08/22 15:44:57 Import directory: /home/runner/work/inforge/inforge/internal/registry
[gosec] 2026/08/22 15:44:58 Checking package: manifest
[gosec] 2026/08/22 15:44:58 Checking file: /home/runner/work/inforge/inforge/internal/manifest/manifest.go
[gosec] 2026/08/22 15:44:58 Import directory: /home/runner/work/inforge/inforge/internal/release
[gosec] 2026/08/22 15:44:58 Checking package: r2
[gosec] 2026/08/22 15:44:58 Checking file: /home/runner/work/inforge/inforge/internal/r2/r2.go
[gosec] 2026/08/22 15:44:58 Import directory: /home/runner/work/inforge/inforge/internal/remote
[gosec] 2026/08/22 15:44:58 Checking package: types
[gosec] 2026/08/22 15:44:58 Checking file: /home/runner/work/inforge/inforge/internal/types/types.go
[gosec] 2026/08/22 15:44:58 Import directory: /home/runner/work/inforge/inforge/internal/app
[gosec] 2026/08/22 15:44:58 Checking package: release
[gosec] 2026/08/22 15:44:58 Checking file: /home/runner/work/inforge/inforge/internal/release/manifest.go
[gosec] 2026/08/22 15:44:58 Checking file: /home/runner/work/inforge/inforge/internal/release/store.go
[gosec] 2026/08/22 15:44:58 Import directory: /home/runner/work/inforge/inforge/internal/aptlock
[gosec] 2026/08/22 15:44:58 Checking package: aptlock
[gosec] 2026/08/22 15:44:58 Checking file: /home/runner/work/inforge/inforge/internal/aptlock/aptlock.go
[gosec] 2026/08/22 15:44:58 Import directory: /home/runner/work/inforge/inforge/internal/hostpaths
[gosec] 2026/08/22 15:44:58 Checking package: hostpaths
[gosec] 2026/08/22 15:44:58 Checking file: /home/runner/work/inforge/inforge/internal/hostpaths/hostpaths.go
[gosec] 2026/08/22 15:44:58 Import directory: /home/runner/work/inforge/inforge/internal/otelcol
[gosec] 2026/08/22 15:44:58 Checking package: remote
[gosec] 2026/08/22 15:44:58 Checking file: /home/runner/work/inforge/inforge/internal/remote/remote.go
[gosec] 2026/08/22 15:44:58 Import directory: /home/runner/work/inforge/inforge/internal/secretstore
[gosec] 2026/08/22 15:44:59 Checking package: app
[gosec] 2026/08/22 15:44:59 Checking file: /home/runner/work/inforge/inforge/internal/app/app.go
[gosec] 2026/08/22 15:44:59 Import directory: /home/runner/work/inforge/inforge/providers/hetzner
[gosec] 2026/08/22 15:44:59 Checking package: otelcol
[gosec] 2026/08/22 15:44:59 Checking file: /home/runner/work/inforge/inforge/internal/otelcol/config.go
[gosec] 2026/08/22 15:44:59 Checking file: /home/runner/work/inforge/inforge/internal/otelcol/install.go
[gosec] 2026/08/22 15:44:59 Checking file: /home/runner/work/inforge/inforge/internal/otelcol/paths.go
[gosec] 2026/08/22 15:44:59 Checking file: /home/runner/work/inforge/inforge/internal/otelcol/shell.go
[gosec] 2026/08/22 15:44:59 Import directory: /home/runner/work/inforge/inforge/schemas
[gosec] 2026/08/22 15:44:59 Checking package: schemas
[gosec] 2026/08/22 15:44:59 Checking file: /home/runner/work/inforge/inforge/schemas/embed.go
[gosec] 2026/08/22 15:44:59 Import directory: /home/runner/work/inforge/inforge/internal/deployment
[gosec] 2026/08/22 15:44:59 Checking package: secretstore
[gosec] 2026/08/22 15:44:59 Checking file: /home/runner/work/inforge/inforge/internal/secretstore/age.go
[gosec] 2026/08/22 15:44:59 Checking file: /home/runner/work/inforge/inforge/internal/secretstore/store.go
[gosec] 2026/08/22 15:44:59 Import directory: /home/runner/work/inforge/inforge/internal/grafana
[gosec] 2026/08/22 15:44:59 Checking package: grafana
[gosec] 2026/08/22 15:44:59 Checking file: /home/runner/work/inforge/inforge/internal/grafana/grafana.go
[gosec] 2026/08/22 15:44:59 Import directory: /home/runner/work/inforge/inforge/internal/hostsecrets
[gosec] 2026/08/22 15:44:59 Checking package: deployment
[gosec] 2026/08/22 15:44:59 Checking file: /home/runner/work/inforge/inforge/internal/deployment/deployment.go
[gosec] 2026/08/22 15:44:59 Import directory: /home/runner/work/inforge/inforge/internal/meshplan
[gosec] 2026/08/22 15:44:59 Checking package: hostsecrets
[gosec] 2026/08/22 15:44:59 Checking file: /home/runner/work/inforge/inforge/internal/hostsecrets/hostsecrets.go
[gosec] 2026/08/22 15:44:59 Checking package: registry
[gosec] 2026/08/22 15:44:59 Checking file: /home/runner/work/inforge/inforge/internal/registry/registry.go
[gosec] 2026/08/22 15:45:00 Checking package: meshplan
[gosec] 2026/08/22 15:45:00 Checking file: /home/runner/work/inforge/inforge/internal/meshplan/deploy.go
[gosec] 2026/08/22 15:45:00 Checking file: /home/runner/work/inforge/inforge/internal/meshplan/meshplan.go
[gosec] 2026/08/22 15:45:00 Checking package: hetzner
[gosec] 2026/08/22 15:45:00 Checking file: /home/runner/work/inforge/inforge/providers/hetzner/compute.go
[gosec] 2026/08/22 15:45:00 Checking file: /home/runner/work/inforge/inforge/providers/hetzner/mesh.go
[gosec] 2026/08/22 15:45:00 Checking file: /home/runner/work/inforge/inforge/providers/hetzner/network.go
[gosec] 2026/08/22 15:45:00 Checking file: /home/runner/work/inforge/inforge/providers/hetzner/regions.go
[gosec] 2026/08/22 15:45:00 Checking file: /home/runner/work/inforge/inforge/providers/hetzner/storage.go
[gosec] 2026/08/22 15:45:00 Checking file: /home/runner/work/inforge/inforge/providers/hetzner/tls.go
Results:


Summary:
  Gosec  : dev
  Files  : 138
  Lines  : 30867
  Nosec  : 44
  Issues : 0

go: downloading golang.org/x/vuln v1.7.0
go: downloading golang.org/x/telemetry v0.0.0-20260811182544-a038080d80e5
go: downloading golang.org/x/mod v0.39.0
go: downloading golang.org/x/tools v0.49.0
=== Symbol Results ===

Vulnerability #1: GO-2026-6214
    Path traversal via crafted reference names in github.com/go-git/go-git
  More info: https://pkg.go.dev/vuln/GO-2026-6214
  Module: github.com/go-git/go-git/v6
    Found in: github.com/go-git/go-git/v6@v6.0.0-alpha.4
    Fixed in: github.com/go-git/go-git/v6@v6.0.0-alpha.5
    Example traces found:
      #1: cmd/inforge/stack.go:217:31: inforge.ephemeralWorkspace calls auto.NewLocalWorkspace, which eventually calls dotgit.DotGit.Ref
      #2: cmd/inforge/stack.go:217:31: inforge.ephemeralWorkspace calls auto.NewLocalWorkspace, which eventually calls dotgit.DotGit.RemoveRef
      #3: cmd/inforge/stack.go:217:31: inforge.ephemeralWorkspace calls auto.NewLocalWorkspace, which eventually calls dotgit.DotGit.SetRef

Vulnerability #2: GO-2026-6213
    Worktree operations may follow symlinks in github.com/go-git/go-git
  More info: https://pkg.go.dev/vuln/GO-2026-6213
  Module: github.com/go-git/go-git/v6
    Found in: github.com/go-git/go-git/v6@v6.0.0-alpha.4
    Fixed in: github.com/go-git/go-git/v6@v6.0.0-alpha.5
    Example traces found:
      #1: cmd/inforge/stack.go:217:31: inforge.ephemeralWorkspace calls auto.NewLocalWorkspace, which eventually calls git.PlainCloneContext
      #2: cmd/inforge/stack.go:217:31: inforge.ephemeralWorkspace calls auto.NewLocalWorkspace, which eventually calls git.Worktree.Checkout

Your code is affected by 2 vulnerabilities from 1 module.
This scan also found 0 vulnerabilities in packages you import and 4
vulnerabilities in modules you require, but your code doesn't appear to call
these vulnerabilities.
Use '-show verbose' for more details.
creating virtual environment...
installing semgrep from spec 'semgrep==1.173.0'...
done! ✨ 🌟 ✨
  installed package semgrep 1.173.0, installed using Python 3.12.3
  These apps are now available
    - pysemgrep
    - semgrep
                  
                  
┌────────────────┐
│ Debugging Info │
└────────────────┘
                  
  SCAN ENVIRONMENT
  versions    - semgrep 1.173.0 on python 3.12.3                                       
  environment - running in environment github-actions, triggering event is pull_request
Fixing git state for github action pull request
Not on head ref: 86a0c47a08a63a2a581dbcb1ebb0fdbe932dfacc; checking that out now.
            
  CONNECTION
Using 14e31d47758f458047a5c9806a78b2754bc1bc8a as the merge-base of 14e31d47758f458047a5c9806a78b2754bc1bc8a and 86a0c47a08a63a2a581dbcb1ebb0fdbe932dfacc
  Initializing scan (deployment=wardnet, scan_id=214883978)  
  Enabled products: Code, Supply Chain                               
        
  ENGINE
Semgrep Pro Engine will be installed in /opt/pipx/venvs/semgrep/lib/python3.12/site-packages/semgrep/bin/semgrep-core-proprietary
Downloading... ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 316.6/316.6 MB 391.5 MB/s 0:00:00
Successfully installed Semgrep Pro Engine (version 1.173.0)!

  Using git merge base detected from environment for diff scans: 14e31d47758f458047a5c9806a78b2754bc1bc8a
               
               
┌─────────────┐
│ Scan Status │
└─────────────┘
  Scanning 2 files tracked by git with 2944 Code rules, 1391 Supply Chain rules:
            
            
  CODE RULES
  Scanning 2 files with 47 <multilang> rules.
                    
  SUPPLY CHAIN RULES
                                                                                                                        
  Dependency Sources   Resolution Method   Ecosystem   Dependencies   Rules                                             
 ───────────────────────────────────────────────────────────────────────────                                            
  go.mod               Lockfile            Gomod       143             1391                                             
  website/yarn.lock    Skipped             Unknown     -                  -                                             
                                                                                                                        
                                                                                                                        
  Analysis       Rules                                                                                                  
 ──────────────────────                                                                                                 
  Basic            965                                                                                                  
  Reachability     406                                                                                                  
  Malicious         20                                                                                                  
                                                                                                                        
  Current version has 1 finding.

Creating git worktree from '14e31d47758f458047a5c9806a78b2754bc1bc8a' to scan baseline.
  Will report findings introduced by these commits (may be incomplete for shallow checkouts):
    * 86a0c47 build(deps): bump github.com/aws/smithy-go from 1.27.3 to 1.27.8

               
               
┌─────────────┐
│ Scan Status │
└─────────────┘
  Scanning 1 file tracked by git with 1 Supply Chain rule:
            
            
  CODE RULES
  No code rules to run.
                    
  SUPPLY CHAIN RULES
                                                                                                                        
  Dependency Sources   Resolution Method   Ecosystem   Dependencies   Rules                                             
 ───────────────────────────────────────────────────────────────────────────                                            
  go.mod               Lockfile            Gomod       143                1                                             
                                                                                                                        
                                                                                                                        
  Analysis       Rules                                                                                                  
 ──────────────────────                                                                                                 
  Reachability       1                                                                                                  
                                                                                                                        
  Uploading scan results  
  Finalizing scan                         
                
┌──────────────┐
│ Scan Summary │
└──────────────┘
✅ CI scan completed successfully.
 • Findings: 0 (0 blocking)
 • Rules run: 112770
 • Targets scanned: 2
 • Parsed lines: ~100.0%
 • Scan skipped: 
   ◦ Matching --exclude patterns: 89
   ◦ Files matching .semgrepignore patterns: 123
 • Scan was limited to files changed since baseline commit.
 • For a detailed list of skipped files and lines, run semgrep with the --verbose flag
CI scan completed successfully.
  View results in Semgrep Cloud Platform:
    https://semgrep.dev/orgs/wardnet/findings?repo=wardnet/inforge&ref=refs/pull/285/merge
    https://semgrep.dev/orgs/wardnet/supply-chain/vulnerabilities?repo=wardnet/inforge&ref=refs/pull/285/merge
  No blocking findings so exiting with code 0
[PASS] gosec
[FAIL] govulncheck
[PASS] semgrep
Error: 1 check(s) failed
bulwark: 1 check(s) failed
  • coverage — go: 66.8% (baseline 66.8%)

📦 Full bulwark output — complete scan and coverage logs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants