Skip to content

Commit d8a6913

Browse files
committed
Replace vulnerable outcaste-io/badger/v3 with original dgraph-io/badger/v3
Tool: gitpod/catfood.gitpod.cloud
1 parent 1077344 commit d8a6913

File tree

2 files changed

+6
-3
lines changed

2 files changed

+6
-3
lines changed

install/installer/go.mod

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -317,6 +317,8 @@ require (
317317
// Fix this version, so go mod does not revert to an older version that's not compatible with other depen
318318
replace helm.sh/helm/v3 => helm.sh/helm/v3 v3.16.0
319319

320+
replace github.com/outcaste-io/badger/v3 => github.com/dgraph-io/badger/v3 v3.2103.5 // use the original instead of the outdated fork with CVEs
321+
320322
replace github.com/gitpod-io/gitpod/components/spicedb => ../../components/spicedb // leeway
321323

322324
replace github.com/gitpod-io/gitpod/image-builder => ../components/image-builder-mk3 // leeway

install/installer/go.sum

Lines changed: 4 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)