-
Notifications
You must be signed in to change notification settings - Fork 129
CVE scan fixes 20250515 #158
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
Not sure 0.6.1 is a correct version now I had to upgrade GO version. Maybe 0.7 is better. Please let me know so I can change VERSION file accordingly. |
|
@dewey May you have a look on this one please ? 🙏 |
|
Will take a look this week 👀 |
|
Hi @dewey , I changed the VERSION file for 0.7, the changes are too consequent for a simple patch in semantic versioning. |
dewey
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good, let's do the version upgrade and then we can merge it.
|
Following review: Update staticcheck for GO 1.24 Security scans OK with temp image |
|
Looks good to me, thanks! |
|
Thanks @dewey , can you publish the corresponding Docker image please ? |
|
I knew there was something missing, just triggered it. Should be done any moment. |
fix CVE scans:
Add flags to docker build to reduce image size + update Alpine image
Add default exec name to gitignore (from Makefile)
VERSION to v0.6.1
Update go libs clickhouse-go, gosnowflake, x/net to fix CVE
GO 1.21 to 1.23 upgrade due to clickhouse-go dependancy.
Scans are now OK with image wanix/sql_exporter:v0.6.1
job.go file was modified by "Make format"
Change github workflow to be GO 1.23 compliant
vendors changes are from