diff --git a/.nancy-ignore b/.nancy-ignore new file mode 100644 index 000000000..7d917de0e --- /dev/null +++ b/.nancy-ignore @@ -0,0 +1 @@ +CVE-2020-8561 # Upstream CVE in Kubernetes that the community has decided will not be fixed. See: https://github.com/kubernetes/kubernetes/issues/104720 diff --git a/Makefile b/Makefile index 21bbba82f..1200b7dff 100644 --- a/Makefile +++ b/Makefile @@ -157,7 +157,7 @@ fvttest: .PHONY: runanalyzedeps runanalyzedeps: which nancy || $(MAKE) install-nancy-dep-scanner - go list -json -deps | nancy sleuth -e sonatype-2022-6522,CVE-2020-8561 --no-color > nancy.log 2>&1; scripts/process_nancy_log.sh $$? + go list -json -deps | nancy sleuth --no-color > nancy.log 2>&1; scripts/process_nancy_log.sh $$? .PHONY: install-nancy-dep-scanner install-nancy-dep-scanner: diff --git a/go.mod b/go.mod index 8f9e98430..2c26a9801 100644 --- a/go.mod +++ b/go.mod @@ -4,8 +4,8 @@ go 1.21.3 require ( github.com/IBM/go-sdk-core/v5 v5.15.1 - github.com/IBM/platform-services-go-sdk v0.56.3 - github.com/IBM/vpc-go-sdk v0.47.0 + github.com/IBM/platform-services-go-sdk v0.56.4 + github.com/IBM/vpc-go-sdk v0.48.0 github.com/fsnotify/fsnotify v1.7.0 github.com/go-openapi/strfmt v0.22.0 github.com/spf13/cobra v1.8.0 diff --git a/go.sum b/go.sum index 6ca146eb7..6c697ee78 100644 --- a/go.sum +++ b/go.sum @@ -7,10 +7,10 @@ github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 h1:UQHMgLO+TxOEl github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1/go.mod h1:xomTg63KZ2rFqZQzSB4Vz2SUXa1BpHTVz9L5PTmPC4E= github.com/IBM/go-sdk-core/v5 v5.15.1 h1:XOzNZbBgnlxOGK1JMMBtZJYSVguK4TFPJiYutuzFmdA= github.com/IBM/go-sdk-core/v5 v5.15.1/go.mod h1:so2mbdIgSp6X8Zm/qLV+whdchTGgi04c3j4xFMsqlCc= -github.com/IBM/platform-services-go-sdk v0.56.3 h1:DQ1VMQSknhPsdT7d+AybKiZT82esczAkHCIBkwYubzQ= -github.com/IBM/platform-services-go-sdk v0.56.3/go.mod h1:+U6Kg7o5u/Bh4ZkLxjymSgfdpVsaWAtsMtzhwclUry0= -github.com/IBM/vpc-go-sdk v0.47.0 h1:2Qcjd4zQQRYjz+y4ZMDP6+aWGifyXCZ9uMmlpW7p9To= -github.com/IBM/vpc-go-sdk v0.47.0/go.mod h1:4Hs5d/aClmsxAzwDQkwG+ri0vW2ykPJdpM6hDLRwKcA= +github.com/IBM/platform-services-go-sdk v0.56.4 h1:FOduByAYUT8RKo51bYyGnS8F0B3NxQ4YW6T7Iuz57wo= +github.com/IBM/platform-services-go-sdk v0.56.4/go.mod h1:+U6Kg7o5u/Bh4ZkLxjymSgfdpVsaWAtsMtzhwclUry0= +github.com/IBM/vpc-go-sdk v0.48.0 h1:4yeSxVX9mizsIW2F0rsVI47rZoNKBrZ1QK9RwwRas9Q= +github.com/IBM/vpc-go-sdk v0.48.0/go.mod h1:FDJpiokOmaYG2hNYDfqKVxUPe8mm/dPi3mdz8Zt4o/Q= github.com/NYTimes/gziphandler v1.1.1 h1:ZUDjpQae29j0ryrS0u/B8HZfJBtBQHjqw2rQ2cqUQ3I= github.com/NYTimes/gziphandler v1.1.1/go.mod h1:n/CVRwUEOgIxrgPvAQhUUr9oeUtvrhMomdKFjzJNB0c= github.com/antlr/antlr4/runtime/Go/antlr/v4 v4.0.0-20230305170008-8188dc5388df h1:7RFfzj4SSt6nnvCPbCqijJi1nWCd+TqAT3bYCStRC18=