CE-711-add-auth-to-download-plugin-and-check-on-url #82
10 new security issues (0 max.).
Here is an overview of what got changed by this pull request:
Issues
======
+ Solved 7
- Added 12
Complexity increasing per file
==============================
- cmd/main.go 2
- internal/template_test.go 10
See the complete overview on Codacy
Annotations
Check warning on line 3 in go.mod
codacy-production / Codacy Static Code Analysis
go.mod#L3
Insecure dependency golang/stdlib@v1.23.0 (CVE-2024-34156: encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion) (update to 1.23.1)
Check warning on line 3 in go.mod
codacy-production / Codacy Static Code Analysis
go.mod#L3
Insecure dependency golang/stdlib@v1.23.0 (CVE-2025-47907: database/sql: Postgres Scan Race Condition) (update to 1.23.12)
Check warning on line 3 in go.mod
codacy-production / Codacy Static Code Analysis
go.mod#L3
Insecure dependency golang/stdlib@v1.23.0 (CVE-2025-47912: The Parse function permits values other than IPv6 addresses to be incl ...) (update to 1.24.8)
Check warning on line 3 in go.mod
codacy-production / Codacy Static Code Analysis
go.mod#L3
Insecure dependency golang/stdlib@v1.23.0 (CVE-2025-58183: tar.Reader does not set a maximum size on the number of sparse region ...) (update to 1.24.8)
Check warning on line 3 in go.mod
codacy-production / Codacy Static Code Analysis
go.mod#L3
Insecure dependency golang/stdlib@v1.23.0 (CVE-2025-58186: Despite HTTP headers having a default limit of 1MB, the number of cook ...) (update to 1.24.8)
Check warning on line 3 in go.mod
codacy-production / Codacy Static Code Analysis
go.mod#L3
Insecure dependency golang/stdlib@v1.23.0 (CVE-2025-58187: Due to the design of the name constraint checking algorithm, the proce ...) (update to 1.24.9)
Check warning on line 3 in go.mod
codacy-production / Codacy Static Code Analysis
go.mod#L3
Insecure dependency golang/stdlib@v1.23.0 (CVE-2025-58188: Validating certificate chains which contain DSA public keys can cause ...) (update to 1.24.8)
Check warning on line 3 in go.mod
codacy-production / Codacy Static Code Analysis
go.mod#L3
Insecure dependency golang/stdlib@v1.23.0 (CVE-2025-61724: The Reader.ReadResponse function constructs a response string through ...) (update to 1.24.8)
Check warning on line 16 in install-binary.sh
codacy-production / Codacy Static Code Analysis
install-binary.sh#L16
Double quote to prevent globbing and word splitting.
Check warning on line 73 in install-binary.sh
codacy-production / Codacy Static Code Analysis
install-binary.sh#L73
Double quote to prevent globbing and word splitting.
Check warning on line 26 in internal/template.go
codacy-production / Codacy Static Code Analysis
internal/template.go#L26
The application was found setting file permissions to overly permissive values.
Check warning on line 34 in internal/template_test.go
codacy-production / Codacy Static Code Analysis
internal/template_test.go#L34
The application was found setting file permissions to overly permissive values.