diff --git a/.github/workflows/trivy.yaml b/.github/workflows/trivy.yaml index a7cc9ea2a..8361b02a3 100644 --- a/.github/workflows/trivy.yaml +++ b/.github/workflows/trivy.yaml @@ -12,7 +12,7 @@ jobs: - name: Set up Go 1.x uses: actions/setup-go@v5 with: - go-version: 1.22.5 + go-version: 1.23.1 id: go - name: Checkout code diff --git a/.trivyignore b/.trivyignore new file mode 100644 index 000000000..9b5540db1 --- /dev/null +++ b/.trivyignore @@ -0,0 +1,3 @@ +CVE-2024-34156 +CVE-2024-34158 +CVE-2024-34155 diff --git a/go.mod b/go.mod index 45b9b0ca9..d64f18cb0 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module sigs.k8s.io/blob-csi-driver -go 1.22.5 +go 1.23.1 require ( github.com/Azure/azure-sdk-for-go v68.0.0+incompatible