infix

mirror of https://github.com/kernelkit/infix.git synced 2026-07-22 01:13:00 +02:00

Files

T

Joachim Wiberg a365238854 .github: scan Go modules for known vulnerabilities

Add govulncheck CI and Dependabot for the two Go modules, src/webui
and src/netbrowse, so vendored dependencies don't quietly accumulate
CVEs between manual updates.

The workflow reports every finding in the run summary but only fails
on vulnerabilities our code actually calls in a dependency.  Called
stdlib vulnerabilities are surfaced too, but they're fixed by bumping
the Buildroot host Go rather than a module's go.mod, so they don't
gate the build.

Dependabot ignores openconfig/goyang: it's pinned to our kernelkit
fork via a replace directive and stepped by hand.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>

2026-06-18 09:02:36 +02:00

ISSUE_TEMPLATE

.github: introduce issue templates

2024-05-16 13:32:35 +02:00

workflows

.github: scan Go modules for known vulnerabilities

2026-06-18 09:02:36 +02:00

CHECKLIST.md

.github: markdown syntax fixes and new section on code signing

2025-11-20 10:45:45 +01:00

CODE-OF-CONDUCT.md

Import a general CoC for project