-
Spike
-
Resolution: Done
-
Critical
-
builds-1.2
-
None
Spike Story
Audit the use of golang x/crypto libraries in source-to-image. Some use is okay, some use is not. See x/crypto usage notes.
Acceptance Criteria
- Review dependencies that reference the Golang x/crypto libraries
- Determine if any code paths import disallowed modules
- If a disallowed module is reachable, assess if its use can be blocked.