Skip to content

Commit

Permalink
Add link to gopkg.dev to listed Go packages with vulnerabilities
Browse files Browse the repository at this point in the history
Signed-off-by: Sascha Schwarze <[email protected]>
  • Loading branch information
SaschaSchwarze0 committed Feb 26, 2025
1 parent 8621bb7 commit dd07989
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion .github/report-release-vulnerabilities.sh
Original file line number Diff line number Diff line change
Expand Up @@ -97,7 +97,7 @@ for image in "${images[@]}"; do
fi

echo " [INFO] Found ${id} in ${pkg}. Requires upgrade from ${vulnerableVersion} to ${fixedVersion}.${fixedSentence}"
echo "| ${id} | ${pkg} | ${vulnerableVersion} -> ${fixedVersion} | ${fixed} |" >>/tmp/report.md
echo "| ${id} | [${pkg}](https://pkg.go.dev/${pkg}) | ${vulnerableVersion} -> ${fixedVersion} | ${fixed} |" >>/tmp/report.md
done <<<"$(jq --raw-output 'select(.finding != null and .finding.fixed_version != null) | [ .finding.osv, .finding.trace[0].module, .finding.trace[0].version, .finding.fixed_version ] | @tsv' <<<"${goVulns}" | sort -u)"

if [ "${goVulnsFound}" == "false" ]; then
Expand Down

0 comments on commit dd07989

Please sign in to comment.