Files
node-problem-detector/vendor/github.com/go-openapi/jsonpointer/SECURITY.md
Bruno Chauvet 877b6d6908 Fix Grype CVEs: update logrus and prometheus/prometheus
- Update github.com/sirupsen/logrus v1.9.0 -> v1.9.3 in test/go.mod
  to fix GHSA-4f99-4q7p-p3gh (High)
- Update github.com/prometheus/prometheus v0.35.0 -> v0.311.3
  to fix GHSA-vffh-x6r8-xx99 (Medium)
- Run go mod tidy and go mod vendor to update vendor directory
2026-05-03 10:05:37 -04:00

1.4 KiB

Security Policy

This policy outlines the commitment and practices of the go-openapi maintainers regarding security.

Supported Versions

Version Supported
O.x

Vulnerability checks in place

This repository uses automated vulnerability scans, at every merged commit and at least once a week.

We use:

Reports are centralized in github security reports and visible only to the maintainers.

Reporting a vulnerability

If you become aware of a security vulnerability that affects the current repository, please report it privately to the maintainers rather than opening a publicly visible GitHub issue.

Please follow the instructions provided by github to Privately report a security vulnerability.

Note

On Github, navigate to the project's "Security" tab then click on "Report a vulnerability".