Bump golang.org/x/term from 0.25.0 to 0.29.0 in /impl #828
dependabot[bot]ci.yml
on: push
vulnerability-scan
41s
build
2m 17s
Annotations
11 errors
|
vulnerability-scan
did.DHT.FromDNSPacket calls jwx.PublicKeyJWK.Thumbprint, which eventually calls nistec.P256Point.ScalarBaseMult
|
|
vulnerability-scan
server.DHTRouter.PutRecord calls io.ReadAll, which eventually calls nistec.P256Point.ScalarMult
|
|
vulnerability-scan
did.DHT.FromDNSPacket calls crypto.BytesToPubKey, which eventually calls nistec.P256Point.SetBytes
|
|
vulnerability-scan
did.GatewayClient.PutDocument calls http.Client.Do
|
|
vulnerability-scan
did.GatewayClient.GetDIDDocument calls http.Get
|
|
vulnerability-scan
telemetry.Shutdown calls trace.TracerProvider.Shutdown, which eventually calls x509.CertPool.AppendCertsFromPEM
|
|
vulnerability-scan
server.DHTRouter.PutRecord calls io.ReadAll, which eventually calls x509.Certificate.Verify
|
|
vulnerability-scan
server.DHTRouter.PutRecord calls io.ReadAll, which eventually calls x509.Certificate.VerifyHostname
|
|
vulnerability-scan
postgres.Postgres.connect calls pgx.Connect, which eventually calls x509.DecryptPEMBlock
|
|
vulnerability-scan
server.Respond calls errors.withMessage.Error, which calls x509.HostnameError.Error
|
|
build
Process completed with exit code 1.
|