Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Version 3.2.6 (9/29/2023) not latest #880

Open
nmanoogian opened this issue Feb 15, 2024 · 0 comments
Open

Version 3.2.6 (9/29/2023) not latest #880

nmanoogian opened this issue Feb 15, 2024 · 0 comments

Comments

@nmanoogian
Copy link

Hey y'all! I noticed that coinbase/salus:latest still points to 3.2.5, not 3.2.6. I'm using Salus through federacy/scan-action which uses latest so I'm not able to easily specify a different tag.

Would you be able to update that latest tag?

nmanoogian added a commit to DopplerHQ/cli that referenced this issue Feb 15, 2024
We were getting the following gosec error when using `slices.Contains`:

```
could not import slices (invalid package name: "")
```

This is because:

- `slices` was added in Go 1.21
- Support for Go 1.21 was added in gosec 2.17
- We are currently using gosec 2.15.0 and via salus 3.2.5 via federacy/scan-action which pulls `coinbase/salus:latest`

Salus 3.2.6 has been released with the gosec version bump but it isn't tagged `latest`. I've filed coinbase/salus#880 to address.

For now, the easiest thing to do was just to not use the `slices` module, which was easy because we already have a util which does the same thing.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

1 participant