Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update go-tuf and sigstore/sigstore to non-vulnerable go-tuf version. #847

Merged
merged 2 commits into from
May 31, 2022
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 4 additions & 5 deletions go.mod
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,6 @@ module github.com/sigstore/rekor
go 1.16

require (
cloud.google.com/go/iam v0.3.0 // indirect
github.com/asaskevich/govalidator v0.0.0-20210307081110-f21760c49a8d
github.com/blang/semver v3.5.1+incompatible
github.com/cavaliercoder/badio v0.0.0-20160213150051-ce5280129e9e // indirect
Expand Down Expand Up @@ -33,12 +32,12 @@ require (
github.com/rs/cors v1.8.2
github.com/sassoftware/relic v0.0.0-20210427151427-dfb082b79b74
github.com/secure-systems-lab/go-securesystemslib v0.3.1
github.com/sigstore/sigstore v1.2.1-0.20220512194100-3ed986cc9758
github.com/sigstore/sigstore v1.2.1-0.20220526001230-8dc4fa90a468
github.com/spf13/cobra v1.4.0
github.com/spf13/pflag v1.0.5
github.com/spf13/viper v1.11.0
github.com/tent/canonical-json-go v0.0.0-20130607151641-96e4ba3a7613
github.com/theupdateframework/go-tuf v0.0.0-20220127213825-87caa18db2a6
github.com/theupdateframework/go-tuf v0.3.0
github.com/tidwall/pretty v1.2.0 // indirect
github.com/tilinna/clock v1.1.0 // indirect
github.com/transparency-dev/merkle v0.0.1
Expand All @@ -50,8 +49,8 @@ require (
gocloud.dev v0.24.1-0.20211119014450-028788aaaa4c
golang.org/x/crypto v0.0.0-20220411220226-7b82a4e95df4
golang.org/x/mod v0.6.0-dev.0.20220106191415-9b9b3d81d5e3
golang.org/x/net v0.0.0-20220421235706-1d1ef9303861
golang.org/x/sync v0.0.0-20210220032951-036812b2e83c
golang.org/x/net v0.0.0-20220520000938-2e3eb7b945c2
golang.org/x/sync v0.0.0-20220513210516-0976fa681c29
google.golang.org/genproto v0.0.0-20220422154200-b37d22cd5731
google.golang.org/grpc v1.46.2
google.golang.org/protobuf v1.28.0
Expand Down
Loading