build(deps): Bump golang.org/x/term from 0.20.0 to 0.21.0 #654

Sign in to view logs

Triggered via pull request June 5, 2024 08:02

dependabot[bot]

opened #306

dependabot/go_modules/golang.org/x/term-0.21.0

Status Failure

Total duration 25m 12s

Artifacts 4

test.yml

on: pull_request

Vulnerability check

Matrix: test-amd64

Annotations

7 errors and 1 warning

Lint: cmd/ui/eula.go#L67

Error return value of `fmt.Scanln` is not checked (errcheck)

issues found

Vulnerability check

installer.PackType.checkEula calls cat.FromBytes, which eventually calls zip.NewReader

Vulnerability check

cryptography.VerifyPackSignature calls zip.OpenReader

Vulnerability check

utils.RoundTrip calls http.Transport.RoundTrip, which eventually calls netip.Addr.IsLoopback

Vulnerability check

utils.RoundTrip calls http.Transport.RoundTrip, which eventually calls netip.Addr.IsMulticast

Vulnerability check

Process completed with exit code 3.

linux | arm64

Restore cache failed: Dependencies file is not found in /home/runner/work/cpackget/cpackget. Supported file pattern: go.sum

Artifacts

Produced during runtime

Name	Size
test-results-darwin-amd64 Expired	570 Bytes
test-results-linux-amd64 Expired	556 Bytes
test-results-linux-arm64 Expired	559 Bytes
test-results-windows-amd64 Expired	560 Bytes