⬆️ Bump golang.org/x/crypto from 0.24.0 to 0.31.0 in /core #1018
8 new problems found by Qodana for Go
Qodana for Go
8 new problems were found
Inspection name | Severity | Problems |
---|---|---|
Constant condition |
🔶 Warning | 4 |
Potential nil dereference |
🔶 Warning | 2 |
Error may be not nil |
🔶 Warning | 1 |
Vulnerable declared dependency |
🔶 Warning | 1 |
☁️ View the detailed Qodana report
Contact Qodana team
Contact us at [email protected]
- Or via our issue tracker: https://jb.gg/qodana-issue
- Or share your feedback: https://jb.gg/qodana-discussions
Details
This result was published with Qodana GitHub Action
Annotations
Check warning on line 196 in platform/configurator.go
github-actions / Qodana for Go
Constant condition
Condition is always true
Check warning on line 320 in core/container.go
github-actions / Qodana for Go
Constant condition
Condition is always true
Check warning on line 210 in cloud/endpoints.go
github-actions / Qodana for Go
Constant condition
Condition is always false
Check warning on line 155 in platform/ext_bitbucket.go
github-actions / Qodana for Go
Constant condition
Condition is always true
Check warning on line 34 in platform/eap.go
github-actions / Qodana for Go
Error may be not nil
`buildDate` might have `nil` or other unexpected value as its corresponding error variable might be not `nil`
Check warning on line 167 in core/installers.go
github-actions / Qodana for Go
Potential nil dereference
Method call `err.Error()` might lead to a nil pointer dereference
Check warning on line 40 in platform/cmd/scan.go
github-actions / Qodana for Go
Potential nil dereference
Potential nil pointer dereference
Check warning on line 59 in platform/go.mod
github-actions / Qodana for Go
Vulnerable declared dependency
Dependency go:golang.org/x/crypto:v0.24.0 is vulnerable , safe version 0.31.0
* [GHSA-v778-237x-gjrc](https://osv.dev/vulnerability/GHSA-v778-237x-gjrc) 8.0 Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto
* [GO-2024-3321](https://osv.dev/vulnerability/GO-2024-3321) 8.0 Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto
Results powered by [OSV](https://osv.dev/)