gardener/machine-controller-manager

Remove use of go-git from Integration Tests

Closed this issue · 0 comments

elankath commented

How to categorize this issue?

/area security
/kind cleanup
/priority 2

What would you like to be added:
Remove use of go-git from IT code and its vendoring.

Why is this needed:
dependabot has bumped up go-git versions due to a security ticket which is causing alerts due to PGP key data in vendored tests. Since go-git is not a prime component of MCM and is only used to clone the repo in MCM tests, we can get rid of its use and vendoring. Use the git CLI to clone the MCM repo.