Update Go version used to build releases
Open
- Dominant language
- Python
- Stars
- 786
- Forks
- 48
- PR merge metrics
- No merged PRs in 30d
Description
Golang 1.17.1 (used for latest build 0.2.1) has several critical vulnerabilities (CVEs), and would be nice to use a more current version if possible for pre-built binaries (I'm lazy and I assume there are many others as well). I know it's a never-ending battle, but since this is used in Microsoft's azure-cli container this way (which uses a WAY older version, but that's another story -- and I can't fix that (easily) until this is resolved), I'm hoping this is easy and controversy-free. Thanks.
Currently Go 1.19.9+ or 1.20.4+ would be needed to be "Critical-CVE-free".
Contributor guide
Assessment
This issue has not been assessed yet.