Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

x/vuln/vulncheck: warn on unavailable Go version in binaries #53740

Open
zpavlinovic opened this issue Jul 8, 2022 · 0 comments
Open

x/vuln/vulncheck: warn on unavailable Go version in binaries #53740

zpavlinovic opened this issue Jul 8, 2022 · 0 comments
Assignees
@zpavlinovic
Labels
NeedsFix The path to resolution is known, but the work has not been done. vulncheck or vulndb Issues for the x/vuln or x/vulndb repo
Milestone
vuln/unplanned

Comments

@zpavlinovic
Copy link
Contributor

vulncheck requires Go versions to detected vulnerabilities in standard libraries. If the Go version is devel or in general does not parse into semver, we should at least warn the user that stdlib vulnerabilities might not be detected.

cc @jba @julieqiu
@zpavlinovic zpavlinovic added this to the Unreleased milestone Jul 8, 2022
@heschi heschi added the NeedsFix The path to resolution is known, but the work has not been done. label Jul 8, 2022
@mvdan mvdan changed the title golang.org/x/vuln/vulncheck: warn on unavailable Go version in binaries x/vuln/vulncheck: warn on unavailable Go version in binaries Jul 10, 2022
@gopherbot gopherbot added the vulncheck or vulndb Issues for the x/vuln or x/vulndb repo label Jul 10, 2022
@julieqiu julieqiu modified the milestones: Unreleased, vuln/unplanned Sep 8, 2022
@zpavlinovic zpavlinovic self-assigned this Feb 8, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@zpavlinovic zpavlinovic

Labels
NeedsFix The path to resolution is known, but the work has not been done. vulncheck or vulndb Issues for the x/vuln or x/vulndb repo
Projects
Go Security
Status: No status
Milestone
vuln/unplanned
Development

No branches or pull requests
4 participants
@zpavlinovic @julieqiu @gopherbot @heschi