jesseduffield / jesseduffield/lazygit
Security: golang.org/x/net 0.7.0 has vulnerabilities
- Dominant language
- Go
- Stars
- 82.4k
- Forks
- 3k
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 19
Description
**Describe the bug**
It seems `net` dependency has vulnerabilities. Since its an indirect dependency may be the dependency can be upgraded?
**To Reproduce**
Steps to reproduce the behavior:
1. Create a Dockerfile with alpine:latest
2. add apk for lazygit
3. view security scan for docker image
4. See error
**Expected behavior**
A clear and concise description of what you expected to happen.
**Screenshots**
If applicable, add screenshots to help explain your problem.
**Version info:**
_Run `lazygit --version` and paste the result here_
commit=, build date=, build source=unknown, version=0.44.1, os=linux, arch=arm64, git version=2.47.1
_Run `git --version` and paste the result here_
git version 2.47.1
**Additional context**
Add any other context about the problem here.
https://scout.docker.com/vulnerabilities/id/CVE-2024-45338
https://scout.docker.com/vulnerabilities/id/CVE-2023-39325
**Note:** please try updating to the latest version or [manually building](https://github.com/jesseduffield/lazygit/#manual) the latest `master` to see if the issue still occurs.
Contributor guide
Assessment
This issue has not been assessed yet.