From 877779f4faff852599e9cca19000bcee4667aa04 Mon Sep 17 00:00:00 2001 From: Ryan Richard Date: Mon, 22 Jun 2026 15:02:38 -0700 Subject: [PATCH] use govulncheck v1.3.0 because v1.4.0 crashes Signed-off-by: Ryan Richard --- pipelines/shared-tasks/run-go-vuln-scan/task.sh | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/pipelines/shared-tasks/run-go-vuln-scan/task.sh b/pipelines/shared-tasks/run-go-vuln-scan/task.sh index 6b3e9d10c..17fcc51c2 100755 --- a/pipelines/shared-tasks/run-go-vuln-scan/task.sh +++ b/pipelines/shared-tasks/run-go-vuln-scan/task.sh @@ -6,7 +6,10 @@ set -euo pipefail go version -go install golang.org/x/vuln/cmd/govulncheck@latest + +# TODO: Locking this to v1.3.0 temporarily because v1.4.0 crashes. +# TODO: In the future, put this back to @latest +go install golang.org/x/vuln/cmd/govulncheck@v1.3.0 cd pinniped