From f64f40e469f4503bc07f814169d008cf0e608136 Mon Sep 17 00:00:00 2001 From: Enrico Alvarenga Date: Tue, 13 Dec 2022 16:40:15 -0800 Subject: [PATCH] fix: mitigate CVE-2022-27664 (#365) fix: update release process to build chamber on go version 1.19.4 to mitigate CVE-2022-27664. --- .github/workflows/build.yml | 6 +++--- .github/workflows/release.yml | 4 ++-- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 75f9572d..040394d8 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -11,7 +11,7 @@ jobs: install-go-modules: strategy: matrix: - go: ['1.18.x', '1.17.x', '1.16.x', '1.15.x'] + go: ['1.19.x', '1.18.x', '1.17.x', '1.16.x', '1.15.x'] runs-on: ubuntu-latest @@ -29,7 +29,7 @@ jobs: test: strategy: matrix: - go: ['1.18.x', '1.17.x', '1.16.x'] + go: ['1.19.x', '1.18.x', '1.17.x', '1.16.x'] runs-on: ubuntu-latest steps: @@ -57,7 +57,7 @@ jobs: dist: strategy: matrix: - go: ['1.18.x', '1.17.x', '1.16.x'] + go: ['1.19.x', '1.18.x', '1.17.x', '1.16.x'] runs-on: ubuntu-latest needs: test diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 40724346..0e0e952f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -9,7 +9,7 @@ jobs: dist: strategy: matrix: - go: ['1.16.x'] + go: ['1.19.x'] runs-on: ubuntu-latest steps: @@ -56,7 +56,7 @@ jobs: publish-dockerhub: strategy: matrix: - go: ['1.16.x'] + go: ['1.19.x'] runs-on: ubuntu-latest needs: dist