Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[SEC-25] Use non predictable uuid library #28

Merged
merged 2 commits into from
Mar 7, 2024
Merged

[SEC-25] Use non predictable uuid library #28

merged 2 commits into from
Mar 7, 2024

Conversation

gyndav
Copy link
Member

@gyndav gyndav commented Mar 7, 2024 •
edited
Loading

As per security team request, we now favor and leverage google/uuid package.

Took the time to upgrade the following areas at the same time:

  • GitHub Actions updates
  • go modules upgrade (which fix one vuln)
  • Golang 1.21

@gyndav gyndav added Type: Feature dependencies Pull requests that update a dependency file labels Mar 7, 2024
@gyndav gyndav requested a review from skateinmars March 7, 2024 08:16
@gyndav gyndav self-assigned this Mar 7, 2024
@gyndav gyndav changed the title Safe uuids [[SEC-25]] Safe uuids Mar 7, 2024
@gyndav gyndav changed the title [[SEC-25]] Safe uuids [SEC-25] Safe uuids Mar 7, 2024
@gyndav gyndav changed the title [SEC-25] Safe uuids [SEC-25] Use non predictable uuid library Mar 7, 2024
@gyndav gyndav merged commit b907ab0 into master Mar 7, 2024
4 checks passed
@gyndav gyndav deleted the safe-uuids branch March 7, 2024 09:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@tkh tkh tkh approved these changes

@skateinmars skateinmars Awaiting requested review from skateinmars

@Sharykhin Sharykhin Awaiting requested review from Sharykhin

@hchienjo hchienjo Awaiting requested review from hchienjo

Assignees

@gyndav gyndav

Labels
dependencies Pull requests that update a dependency file Type: Feature
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@gyndav @tkh