openshift / openshift/rosa

Remove obsolete .snyk ignore entries after go-toolset 1.26.4 bump

Open
#3,350 0 comments 0 reactions 1 assignee View on GitHub

@amandahla is already working on this.

Since Jul 8, 2026.

Dominant language
Go
Stars
103
Forks
257
Avg merge
2d 21h
Merged PRs (30d)
43

Description

Summary

PR #3347 bumps the registry.access.redhat.com/ubi9/go-toolset base image tag from 1.26.3 to 1.26.4-1783442369 in Dockerfile, images/Dockerfile.e2e, and images/Dockerfile.konflux.

The repo's .snyk file contains three ignore entries whose stated removal condition ("Remove when CI runs Go >= 1.26.4.") is now satisfied by this change:

  • SNYK-GOLANG-STDNETTEXTPROTO-17135843
  • SNYK-GOLANG-STDMIME-17135844
  • SNYK-GOLANG-STDCRYPTOX509-17135840

Required change

Once the updated go-toolset (Go >= 1.26.4) image is confirmed running in CI builds, remove these three ignore blocks from the .snyk file at the repo root (each currently has an expires: 2026-08-01T00:00:00.000Z reason tied to the Go 1.26.3 -> 1.26.4 requirement).

Affected files

  • .snyk

Acceptance criteria

  • Confirm CI builder image is running Go >= 1.26.4.
  • Remove the three obsolete ignore entries listed above from .snyk.
  • Confirm snyk test no longer needs to suppress these advisories (i.e., underlying stdlib fix is present).

References

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.