build(deps): Bump golang.org/x/net from 0.25.0 to 0.26.0 #652

Sign in to view logs

Triggered via pull request June 5, 2024 08:02

dependabot[bot]

opened #304

dependabot/go_modules/golang.org/x/net-0.26.0

Status Failure

Total duration 25m 55s

Artifacts 4

test.yml

on: pull_request

Vulnerability check

Matrix: test-amd64

Annotations

7 errors and 1 warning

Lint: cmd/ui/eula.go#L67

Error return value of `fmt.Scanln` is not checked (errcheck)

issues found

Vulnerability check

installer.PackType.checkEula calls cat.FromBytes, which eventually calls zip.NewReader

Vulnerability check

cryptography.VerifyPackSignature calls zip.OpenReader

Vulnerability check

utils.RoundTrip calls http.Transport.RoundTrip, which eventually calls netip.Addr.IsLoopback

Vulnerability check

utils.RoundTrip calls http.Transport.RoundTrip, which eventually calls netip.Addr.IsMulticast

Vulnerability check

Process completed with exit code 3.

linux | arm64

Restore cache failed: Dependencies file is not found in /home/runner/work/cpackget/cpackget. Supported file pattern: go.sum

Artifacts

Produced during runtime

Name	Size
test-results-darwin-amd64 Expired	571 Bytes
test-results-linux-amd64 Expired	556 Bytes
test-results-linux-arm64 Expired	558 Bytes
test-results-windows-amd64 Expired	563 Bytes