kyma-project / registry-cache / 37948234083
24%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 15
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 24.059%. Remained the same
37948234083

push

github

web-flow 
sec: pin govulncheck-action to SHA (#162)

* sec: pin govulncheck-action to SHA

* Fix govulncheck security findings and workflow false positive

- Bump Go from 1.27.1 to 1.27.2 to fix 9 stdlib HTTP/2 and TLS
  vulnerabilities (GO-2026-6603, GO-2026-6605, GO-2026-6607,
  GO-2026-6608, GO-2026-6610, GO-2026-6611, GO-2026-6612,
  GO-2026-6613, GO-2026-6617)
- Bump golang.org/x/net from v0.59.0 to v0.60.0 to fix 5 HTTP/2
  vulnerabilities (same set, from x/net module)
- Replace golang/govulncheck-action with direct govulncheck invocation
  and jq-based filtering that skips findings with no known fixed version.
  This handles the false-positive GO-2026-6568 (gardener/gardener):
  the vuln DB records "Fixed in: N/A" in standard Go SEMVER because the
  fix at v1.142.6+/v1.143.3+/v1.144.2+ could not be mapped to SEMVER;
  the current dependency v1.146.3 is in fact patched but govulncheck
  cannot tell. The DB itself notes this as a potential false-positive.

* Bump golangci-lint to v2.14.0 for Go 1.27.2 compatibility

golangci-lint v2.13.1 cannot process export data version 5 emitted by
Go 1.27.2 (version 5 > maximum supported version 4).  v2.14.0 ships
with updated gcexportdata support and passes cleanly against the Go
1.27.2 toolchain.

* Bump Dockerfile base image to golang:1.27.2-alpine3.24

go.mod now requires go >= 1.27.2, so the docker builder image must
also be 1.27.2 to satisfy the go mod download requirement.

230 of 956 relevant lines covered (24.06%)

0.24 hits per line

Jobs
ID Job ID Ran Files Coverage
1 37948234083.1 15
24.06
GitHub Action Run
Source Files on build 37948234083