xixu-me/xdrop
1
0 Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Security audits failing #2

New Issue
Closed
opened 2026-10-07 17:23:44 +00:00 by xixu-me · 1 comment
xixu-me commented 2026-10-07 17:23:44 +00:00
Owner
Copy link
Copy source

One or more scheduled security audit jobs failed.

GitHub 来源：https://github.com/xixu-me/xdrop/issues/14
作者：github-actions[bot] · 创建时间：2026-04-13T03:54:44Z

One or more scheduled security audit jobs failed. - Workflow run: https://github.com/xixu-me/xdrop/actions/runs/24324870410 - bun audit: success - govulncheck: failure - Trigger: schedule - Commit: 0005fce9981d0d6444745e617143341e49cd5d21 --- GitHub 来源：https://github.com/xixu-me/xdrop/issues/14 作者：github-actions[bot] · 创建时间：2026-04-13T03:54:44Z <!-- github-archive:4251143439 -->
xixu-me added the security-audit label 2026-10-07 17:23:44 +00:00
xixu-me commented 2026-10-07 17:23:49 +00:00
Author
Owner
Copy link
Copy source

Fixed in commit c08aa8a. Root cause was apps/api/go.mod pinning Go 1.26.1, which caused govulncheck to flag standard library vulnerabilities fixed in go1.26.2. Verified with: go test ./... and go run golang.org/x/vuln/cmd/govulncheck@latest ./... (no vulnerabilities found).

GitHub 来源：https://github.com/xixu-me/xdrop/issues/14#issuecomment-4234897774
作者：xixu-me · 创建时间：2026-04-13T08:21:49Z

Fixed in commit c08aa8a. Root cause was apps/api/go.mod pinning Go 1.26.1, which caused govulncheck to flag standard library vulnerabilities fixed in go1.26.2. Verified with: go test ./... and go run golang.org/x/vuln/cmd/govulncheck@latest ./... (no vulnerabilities found). --- GitHub 来源：https://github.com/xixu-me/xdrop/issues/14#issuecomment-4234897774 作者：xixu-me · 创建时间：2026-04-13T08:21:49Z <!-- github-archive:4234897774 -->
Sign in to join this conversation.
No Branch/Tag Specified
Labels
Clear labels
bug
Something isn't working
 codex
dependencies
Dependency updates and maintenance
 dependencies:auto-merge
Dependabot updates that can merge after checks pass
 docker
Docker image and container updates
 documentation
Improvements or additions to documentation
 duplicate
This issue or pull request already exists
 enhancement
New feature or request
 github-actions
GitHub Actions and workflow updates
 go
Go dependency updates
 good first issue
Good for newcomers
 help wanted
Extra attention is needed
 invalid
This doesn't seem right
 javascript
JavaScript and TypeScript dependency updates
 question
Further information is requested
 security-audit
Failures from the scheduled security audits workflow
 wontfix
This will not be worked on
No labels security-audit
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
xixu-me (Xi Xu)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: xixu-me/xdrop#2