Skip to content
Semgrep - SAST Scan

chore: upgrade go-git to v5.19.2 to address CVE-2026-71556, CVE-2026-71557 #76

Sign in to view logs

chore: upgrade go-git to v5.19.2 to address CVE-2026-71556, CVE-2026-71557

chore: upgrade go-git to v5.19.2 to address CVE-2026-71556, CVE-2026-71557 #76

Triggered via pull request August 10, 2026 19:54
@brendan-kellambrendan-kellam
closed #21
claude/cve/go-git-SOU-1910
Status Success
Total duration 38s
Artifacts –

semgrep.yml

on: pull_request
semgrep
35s
semgrep
Fit to window
Zoom out
Zoom in

Annotations

2 warnings
semgrep
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
semgrep
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/