Skip to content
Security Scan

Remove 'check-latest' from setup-go #185

Sign in to view logs

Remove 'check-latest' from setup-go

Remove 'check-latest' from setup-go #185

Triggered via pull request January 21, 2025 12:28
@alexandearalexandear
opened #99
setup-go-remove-check-latest
Status Failure
Total duration 39s
Artifacts –

security.yml

on: pull_request
Scan for vulnerabilities in Go code
29s
Scan for vulnerabilities in Go code
Fit to window
Zoom out
Zoom in

Annotations

10 errors and 1 warning
Scan for vulnerabilities in Go code
internal.App.doCommitsForProject calls git.Worktree.Commit, which eventually calls binary.Read
Scan for vulnerabilities in Go code
internal.App.lastCommitDate calls git.Repository.CommitObject, which eventually calls binary.ReadHash
Scan for vulnerabilities in Go code
internal.App.doCommitsForProject calls git.Worktree.Commit, which eventually calls binary.ReadUint16
Scan for vulnerabilities in Go code
internal.App.doCommitsForProject calls git.Worktree.Commit, which eventually calls binary.ReadUint32
Scan for vulnerabilities in Go code
internal.App.doCommitsForProject calls git.Worktree.Commit, which eventually calls binary.ReadUntil
Scan for vulnerabilities in Go code
internal.App.lastCommitDate calls git.Repository.CommitObject, which eventually calls binary.ReadVariableWidthInt
Scan for vulnerabilities in Go code
internal.App.doCommitsForProject calls git.Worktree.Commit, which eventually calls binary.Write
Scan for vulnerabilities in Go code
internal.init calls object.init, which calls binary.init
Scan for vulnerabilities in Go code
internal.App.createOrOpenRepo calls git.PlainInit, which eventually calls cache.NewObjectLRUDefault
Scan for vulnerabilities in Go code
internal.App.lastCommitDate calls git.Repository.CommitObject, which eventually calls cache.ObjectLRU.Get
Scan for vulnerabilities in Go code
Both go-version and go-version-file inputs are specified, only go-version will be used