Skip to content

Commit d569b51

Browse files
committed
dep: use chainguard/git-urls instead of whilp/git-urls
chainguards repo fixes the security issue with regex used - whilp/git-urls#24
1 parent 02d15a4 commit d569b51

File tree

3 files changed

+4
-4
lines changed

3 files changed

+4
-4
lines changed

go.mod

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,7 @@ require (
1313
github.com/Masterminds/semver/v3 v3.2.1
1414
github.com/antlr4-go/antlr/v4 v4.13.1
1515
github.com/apigear-io/objectlink-core-go v0.5.1
16+
github.com/chainguard-dev/git-urls v1.0.2
1617
github.com/creativeprojects/go-selfupdate v1.3.0
1718
github.com/dop251/goja v0.0.0-20240707163329-b1681fb2a2f5
1819
github.com/dop251/goja_nodejs v0.0.0-20240418154818-2aae10d4cbcf
@@ -24,7 +25,6 @@ require (
2425
github.com/gocarina/gocsv v0.0.0-20240520201108-78e41c74b4b1
2526
github.com/google/uuid v1.6.0
2627
github.com/rs/zerolog v1.33.0
27-
github.com/whilp/git-urls v1.0.0
2828
github.com/xeipuuv/gojsonschema v1.2.0
2929
gopkg.in/natefinch/lumberjack.v2 v2.2.1
3030
)

go.sum

+2-2
Original file line numberDiff line numberDiff line change
@@ -36,6 +36,8 @@ github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5 h1:0CwZNZbxp69SHPd
3636
github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5/go.mod h1:wHh0iHkYZB8zMSxRWpUBQtwG5a7fFgvEO+odwuTv2gs=
3737
github.com/atomicgo/cursor v0.0.1/go.mod h1:cBON2QmmrysudxNBFthvMtN32r3jxVRIvzkUiF/RuIk=
3838
github.com/bwesterb/go-ristretto v1.2.3/go.mod h1:fUIoIZaG73pV5biE2Blr2xEzDoMj7NFEuV9ekS419A0=
39+
github.com/chainguard-dev/git-urls v1.0.2 h1:pSpT7ifrpc5X55n4aTTm7FFUE+ZQHKiqpiwNkJrVcKQ=
40+
github.com/chainguard-dev/git-urls v1.0.2/go.mod h1:rbGgj10OS7UgZlbzdUQIQpT0k/D4+An04HJY7Ol+Y/o=
3941
github.com/cloudflare/circl v1.3.3/go.mod h1:5XYMA4rFBvNIrhs50XuiBJ15vF2pZn4nnUKZrLbUZFA=
4042
github.com/cloudflare/circl v1.3.9 h1:QFrlgFYf2Qpi8bSpVPK1HBvWpx16v/1TZivyo7pGuBE=
4143
github.com/cloudflare/circl v1.3.9/go.mod h1:PDRU+oXvdD7KCtgKxW95M5Z8BpSCJXQORiZFnBQS5QU=
@@ -231,8 +233,6 @@ github.com/subosito/gotenv v1.6.0 h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8
231233
github.com/subosito/gotenv v1.6.0/go.mod h1:Dk4QP5c2W3ibzajGcXpNraDfq2IrhjMIvMSWPKKo0FU=
232234
github.com/ulikunitz/xz v0.5.12 h1:37Nm15o69RwBkXM0J6A5OlE67RZTfzUxTj8fB3dfcsc=
233235
github.com/ulikunitz/xz v0.5.12/go.mod h1:nbz6k7qbPmH4IRqmfOplQw/tblSgqTqBwxkY0oWt/14=
234-
github.com/whilp/git-urls v1.0.0 h1:95f6UMWN5FKW71ECsXRUd3FVYiXdrE7aX4NZKcPmIjU=
235-
github.com/whilp/git-urls v1.0.0/go.mod h1:J16SAmobsqc3Qcy98brfl5f5+e0clUvg1krgwk/qCfE=
236236
github.com/xanzy/go-gitlab v0.107.0 h1:P2CT9Uy9yN9lJo3FLxpMZ4xj6uWcpnigXsjvqJ6nd2Y=
237237
github.com/xanzy/go-gitlab v0.107.0/go.mod h1:wKNKh3GkYDMOsGmnfuX+ITCmDuSDWFO0G+C4AygL9RY=
238238
github.com/xanzy/ssh-agent v0.3.3 h1:+/15pJfg/RsTxqYcX6fHqOXZwwMP+2VyYWJeWM2qQFM=

pkg/git/url.go

+1-1
Original file line numberDiff line numberDiff line change
@@ -3,8 +3,8 @@ package git
33
import (
44
"net/url"
55

6+
urls "github.com/chainguard-dev/git-urls"
67
"github.com/gitsight/go-vcsurl"
7-
urls "github.com/whilp/git-urls"
88
)
99

1010
func ParseAsUrl(url string) (*url.URL, error) {

0 commit comments

Comments
 (0)