Comments (7)
Hey @Piccirello
We got this upgraded in 2.8.0.
Thanks!
from salus.
Hey @Piccirello,
Thanks for reporting this! We're looking at upgrading to golang 1.13 for the last few months but we constantly are running into compile errors on various projects that didn't exist in 1.12. We're looking into this more and will release a Salus build with an updated version.
Right now, I would fork the repo and modify the Dockerfile to pull in the 1.13 golang binary instead. You'll have to modify lines 47 and 49 in https://github.com/coinbase/salus/blob/master/Dockerfile#L47-L49. You may run into the same build issues as us or you may not. 1.13 has been flaky for us.
I know this isn't a great solution but should hopefully work for you.
from salus.
Thanks a lot for the suggestion. I may hold off on this for now as it would require forking not only this repo but also the federacy GitHub Action. It may just be quicker in the short term to write a CI job that calls gosec (albeit w/o Salus' other goodies).
It would be great if the golang version were configurable. It would allow you to internally selectively build your failing projects with go 1.12, without having to hold back the default golang version. I completley understand if this feature isn't a priority.
One note on the Dockerfile you linked- there are a couple outdated dependencies. Node 12 is the current LTS version. The version of npm used is also quite a bit out of date. And lastly, gosec 2.1.0 is available 😃 Happy to make issues for any/all of these if desired.
from salus.
Oh good point. We'll probably patch those this coming release.
I believe I got most of the gosec 2.1.0 features before they committed to a version bump by locking onto a recent commit.
We'll update these hopefully this week. The hard part is making sure we don't break existing projects in our integration tests and then figuring out why when we do .
Do you have an OSS project we can add to our integration tests that requires golang 1.13? We generally test these internally by running a diff between the latest and the dev branches before releasing.
from salus.
Do you have an OSS project we can add to our integration tests that requires golang 1.13?
You're welcome to use our CLI in your integration tests- it's OSS licensed with Apache 2.0. Otherwise, this search yielded a couple results using os.UserConfigDir()
, including OpenDiablo2/OpenDiablo2 with 4.5k stars.
from salus.
Just a note that Go 1.14 has now been released.
from salus.
Fantastic news! Thanks @nishils.
from salus.
Related Issues (20)
- Semgrep patterns failing on 2.10.1 HOT 8
- Add support for Rust security scanning HOT 2
- add find-sec-bugs scanner
- SARIF support HOT 12
- Salus exception config not working with Circle CI HOT 4
- How to export dependencies(all) as part of the report? HOT 2
- Update NPMAudit version HOT 12
- Purpose of `safe_local_report_path`? HOT 2
- Error with Default Configs in Orb federacy/[email protected] HOT 2
- Dead Link on Salus Logo in repo's README.md
- Add pnpm audit support HOT 1
- ClairScanner Question HOT 1
- scan erros if package-lock.json is present when active_scanners: all HOT 1
- . HOT 1
- Regex used for project name validation having unexpected effect
- Add Support for Sobelow (Elixir) HOT 3
- GitHub Action example configuration fails because `cargo-audit` not found HOT 1
- Unreviewed commit on master! HOT 1
- Version 3.2.6 (9/29/2023) not latest
- Hi im new hier. My Name is Mateusz HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from salus.