Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 22, 2022

Bumps securego/gosec from 2.12.0 to 2.13.1.

Release notes

Sourced from securego/gosec's releases.

v2.13.1

Changelog

  • 19fa856 fix: make sure that nil Cwe pointer is handled when getting the CWE ID
  • 62fa4b4 test: remove white spaces from template
  • 074dc71 fix: handle nil CWE pointer in text template

v2.13.0

Changelog

  • 79a5b13 chore(deps): update dependency babel-standalone to v7
  • 97f03d9 chore: update module go to 1.19
  • 0ba05e1 chore: fix lint warnings
  • d3933f9 chore: add support for Go 1.19
  • 4e68fb5 fix: parsing of the Go version (#844)
  • 0c8e63e Detect use of net/http functions that have no support for setting timeouts (#842)
  • 6a26c23 Refactor SQL rules for better extensibility (#841)
  • 1b0873a chore(deps): update module golang.org/x/tools to v0.1.12 (#840)
  • 845483e Fix lint warning
  • 45bf9a6 Check the suppressed issues when generating the exit code
  • a5982fb Fix for G402. Check package path instead of package name (#838)
  • ea6d49d fix G204 bugs (#835)
  • 21fcd2f Phase out support for Go 1.16 since is not supported anymore by Go team (#837)
  • 3cda47a chore(deps): update all dependencies (#836)
  • 0212c83 chore(deps): update dependency highlight.js to v11.6.0 (#830)
  • 9a25f4e fix: filepaths with git anywhere in them being erroneously excluded (#828)
  • 602ced7 Fix wrong location for G109 (#829)
  • 7dd9ddd chore(deps): update golang.org/x/crypto digest to 0559593 (#826)
  • b0f3e78 fix ReadTimeout for G112 rule
  • 05f3ca8 Pin cosign-installer to v2 (#824)
Commits
  • 19fa856 fix: make sure that nil Cwe pointer is handled when getting the CWE ID
  • 62fa4b4 test: remove white spaces from template
  • 074dc71 fix: handle nil CWE pointer in text template
  • 79a5b13 chore(deps): update dependency babel-standalone to v7
  • 97f03d9 chore: update module go to 1.19
  • 0ba05e1 chore: fix lint warnings
  • d3933f9 chore: add support for Go 1.19
  • 4e68fb5 fix: parsing of the Go version (#844)
  • 0c8e63e Detect use of net/http functions that have no support for setting timeouts (#...
  • 6a26c23 Refactor SQL rules for better extensibility (#841)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [securego/gosec](https://github.com/securego/gosec) from 2.12.0 to 2.13.1.
- [Release notes](https://github.com/securego/gosec/releases)
- [Changelog](https://github.com/securego/gosec/blob/master/.goreleaser.yml)
- [Commits](securego/gosec@a9b0ef0...19fa856)

---
updated-dependencies:
- dependency-name: securego/gosec
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Aug 22, 2022
@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@jauderho jauderho merged commit abbb4a8 into main Aug 22, 2022
@jauderho jauderho deleted the dependabot/github_actions/securego/gosec-2.13.1 branch August 22, 2022 05:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants