From 634795732074c5789062c828e6afa8e4590c6d9e Mon Sep 17 00:00:00 2001 From: Rafaela Soares Date: Tue, 6 May 2025 10:01:34 +0100 Subject: [PATCH 1/2] fix --- make/generate.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/make/generate.mk b/make/generate.mk index 0a9381cc..e8ae2ce5 100644 --- a/make/generate.mk +++ b/make/generate.mk @@ -40,7 +40,7 @@ gen-crd-ref-docs: crd-ref-docs .PHONY: generate-openapi generate-openapi: openapi-gen @echo "re-generating the openapi go file..." - $(OPENAPI_GEN) ./api/$(API_VERSION)/ \ + $(OPENAPI_GEN) ./api/$(API_VERSION)/ \ --output-pkg github.com/codeready-toolchain/api/api/$(API_VERSION) \ --output-file zz_generated.openapi.go \ --output-dir ./api/$(API_VERSION) \ From d8010fb78ceb4343c1e6c69e8347c225c5bbea00 Mon Sep 17 00:00:00 2001 From: Rafaela Soares Date: Mon, 3 Nov 2025 17:32:35 +0000 Subject: [PATCH 2/2] update .govulncheck.yaml --- .govulncheck.yaml | 26 +++++++++++++++++++++++++- 1 file changed, 25 insertions(+), 1 deletion(-) diff --git a/.govulncheck.yaml b/.govulncheck.yaml index 219bc58b..190759b8 100644 --- a/.govulncheck.yaml +++ b/.govulncheck.yaml @@ -1 +1,25 @@ -ignored-vulnerabilities: [] \ No newline at end of file +ignored-vulnerabilities: + # Parsing DER payload can cause memory exhaustion in encoding/asn1 + # Found in: encoding/asn1@go1.23.12 + # Fixed in: encoding/asn1@go1.24.8 + - id: GO-2025-4011 + info: https://pkg.go.dev/vuln/GO-2025-4011 + silence-until: 2025-12-03 +# Insufficient validation of bracketed IPv6 hostnames in net/url + # Found in: net/url@go1.23.12 + # Fixed in: net/url@go1.24.8 + - id: GO-2025-4010 + info: https://pkg.go.dev/vuln/GO-2025-4010 + silence-until: 2025-12-03 + # Quadratic complexity when parsing some invalid inputs in encoding/pem + # Found in: encoding/pem@go1.23.12 + # Fixed in: encoding/pem@go1.24.8 + - id: GO-2025-4009 + info: https://pkg.go.dev/vuln/GO-2025-4009 + silence-until: 2025-12-03 + # Quadratic complexity when checking name constraints in crypto/x509 + # Found in: crypto/x509@go1.23.12 + # Fixed in: crypto/x509@go1.24.9 + - id: GO-2025-4007 + info: https://pkg.go.dev/vuln/GO-2025-4007 + silence-until: 2025-12-03 \ No newline at end of file