fix(security): remediate CVE vulnerabilities#132
Conversation
- Update Go version to 1.25.8 (fixes CVE-2026-25679, CVE-2026-27142, CVE-2026-27139) - Update google.golang.org/grpc to v1.79.3 (fixes GHSA-p77j-4mvh-x3m3) - Update CI workflow Go version to 1.25 Signed-off-by: Alper Rifat Ulucinar <ulucinar@users.noreply.github.com>
Build Failure AnalysisCheck: lint SummaryThe lint check failed due to a Go version mismatch between Root CauseThe This commonly occurs when bumping the Go version for CVE fixes without updating the corresponding Makefile variable. Error DetailsRecommendationUpdate the Fix: GO_REQUIRED_VERSION ?= 1.25This analysis was generated by the build-failure-analyze skill. |
- Update GO_REQUIRED_VERSION from 1.24 to 1.25 in Makefile to match go.mod Signed-off-by: Alper Rifat Ulucinar <ulucinar@users.noreply.github.com>
Build Failure AnalysisCheck: lint SummaryThe lint check failed because golangci-lint v2.1.2 was built with Go 1.24 and cannot lint code targeting Go 1.25.8. Root CauseWhile we correctly updated The golangci-lint binary version is independent of the Error DetailsRecommendationUpdate the Fix: GOLANGCILINT_VERSION = 2.11.4This analysis was generated by the build-failure-analyze skill. |
- Update GOLANGCILINT_VERSION from 2.1.2 to 2.11.4 in Makefile Signed-off-by: Alper Rifat Ulucinar <ulucinar@users.noreply.github.com>
Build Failure AnalysisCheck: lint SummaryThe lint check failed with 12 Root CauseThe Error DetailsRecommendationCode changes are required to fix this issue. All affected methods in
This analysis was generated by the build-failure-analyze skill. |
Replace all instances of exec.Command with exec.CommandContext to satisfy the noctx linter. All affected functions already receive a context.Context parameter, so this change ensures proper context propagation for command cancellation and lifecycle management. Signed-off-by: Alper Rifat Ulucinar <ulucinar@users.noreply.github.com>
|
/test-examples="examples/cluster/workspace-inline-aws.yaml" |
…kefile Signed-off-by: Alper Rifat Ulucinar <ulucinar@users.noreply.github.com>
|
/test-examples="examples/cluster/workspace-inline-aws.yaml" |
Summary
This PR fixes CVE vulnerabilities identified by security scanning.
Vulnerabilities Fixed
Changes Made
go mod tidyto update dependency checksums.github/workflows/ci.ymlReferences
Verification
cve-scanskill after fixes