(1.28) Automated cherry pick of #1146: upgraded to ec2 v2, buggy #1157: Update ELB and ELBV2 packages to AWS SDK Go V2 #1169: aws sdk go upgrade #1177: update aws & awserr to go sdk v2 #1378
yue9944882deps.yml
on: pull_request
dependency-review
5s
govulncheck
1m 15s
Annotations
11 errors and 2 warnings
|
dependency-review
Dependency review detected vulnerable packages.
|
|
govulncheck
providers.Cloud.buildSelfAWSInstance calls io.ReadAll, which eventually calls tls.Conn.Read
|
|
govulncheck
ecr.main calls cobra.Command.Execute, which eventually calls tls.Conn.HandshakeContext
|
|
govulncheck
tagging.Controller.Run calls cache.WaitForCacheSync, which eventually calls tls.Conn.Handshake
|
|
govulncheck
providers.awsSDKProvider.Compute calls ec2.NewFromConfig, which eventually calls pem.Decode
|
|
govulncheck
providers.Cloud.applyUnSchedulableTaint calls core.nodes.Get, which eventually calls url.URL.Parse
|
|
govulncheck
providers.instances.getInstance calls ec2.EC2.DescribeInstances, which eventually calls url.ParseRequestURI
|
|
govulncheck
providers.AutoscalingResolver.ResolveEndpoint calls url.Parse
|
|
govulncheck
tagging.registerMetrics calls sync.Once.Do, which eventually calls asn1.Unmarshal
|
|
govulncheck
providers.Cloud.applyUnSchedulableTaint calls core.nodes.Get, which eventually calls http.Client.Do
|
|
govulncheck
providers.Cloud.DeleteDisk calls prometheus.MultiError.Error, which eventually calls x509.Certificate.Verify
|
|
govulncheck
Failed to restore: Cache service responded with 400
|
|
govulncheck
Both go-version and go-version-file inputs are specified, only go-version will be used
|