segmentio/chamber

Security Scans flagging go-complier v1.13.15

dli-spoton opened this issue · 3 comments

Our security scanners are still finding go-complier version 1.13.15 on Chamber version 2.11.0.

I think it might be because the Dockerfile is building from golang:1.13-alpine here.

Relates to: #363

Hey @dli-spoton, we're working on this and should have a fix up soon: #368. Thanks for letting us know.

@dli-spoton This is mitigated in chamber v2.11.1.

completed in #368