k8snetworkplumbingwg / multi-networkpolicy-iptables

58%

master: 58%

LAST BUILD ON BRANCH bump-cobra

branch: bump-cobra

CHANGE BRANCH

x

Reset

Sync Branches

• bump-cobra
• bond-cni
• bump-vendor
• codeql
• cve
• default-protocol
• dependabot/go_modules/github.com/containernetworking/cni-0.8.1
• dependabot/go_modules/github.com/containernetworking/plugins-0.8.6
• dependabot/go_modules/golang.org/x/oauth2-0.27.0
• dependabot/go_modules/google.golang.org/grpc-1.53.0
• dependabot/go_modules/google.golang.org/grpc-1.56.3
• dependabot/go_modules/google.golang.org/protobuf-1.33.0
• dependabot/go_modules/gopkg.in/yaml.v3-3.0.0
• dev/add-ipblock-e2e
• dev/add-notice
• dev/ipv6
• dev/refine-policy
• dev/update-ci
• dev/update-golang
• e2e
• e2e-debug
• e2e-testing
• e2e-update-image
• enable-e2e
• fix-cve
• fix-revive
• fix-typo-in-container-registry-domain
• fix/14
• fix/cap
• fix/dependabot
• fix/dependabot-alerts
• fix/list-rule-return
• fix/remove-docker
• fix/update-mem-limit
• fix/warning
• fix/wrong-iptables
• improve-logging
• ipv6
• ipv6-bug-fix
• log-filter-rules
• master
• namespaces
• ocpbugs-974
• patch-1
• remove-field
• remove-v1alpha2
• stop-signals
• update-action
• update-e2e
• update-k8s
• update-prom-vendor
• us-OCPBUGS-36468
• us/CVE-2024-45338
• us/OCPBUGS-44354
• us/OCPBUGS-45980
• us/e2e-fix-flakes
• us/end-port
• us/end-port-e2e
• v1beta2

Build # 13374863406

Build Type

Pull #72

github

Committed by zeeke

Commit Message

Bump `github.com/spf13/cobra@v1.9.1`

This dependency bump solves a security issue:

```
✗ [Medium] Improper Neutralization of Directives in Statically Saved Code
   Path: vendor/github.com/spf13/cobra/command.go, line 888
   Info: Unsanitized input from a CLI argument flows into text.template.New, where it is used to construct a template that gets rendered. This may result in a Server-Side Template Injection vulnerability.
```

Signed-off-by: Andrea Panattoni <apanatto@redhat.com>

Pull Request Pull Request #72: Bump `github.com/spf13/cobra@v1.9.1`

Run Details

1119 of 1926 relevant lines covered (58.1%)

0.67 hits per line