-
Story
-
Resolution: Unresolved
-
Critical
-
None
-
False
-
None
-
False
-
-
Story (Required)
There is a CVE reported for golang.org/x/crypto https://github.com/advisories/GHSA-v778-237x-gjrc and we need to bump for all the components
Operator PR:
https://github.com/tektoncd/operator/pull/2454
Background (Required)
<Describes the context or background related to this story>
Out of scope
<Defines what is not included in this story>
Approach (Required)
<Description of the general technical path on how to achieve the goal of the story. Include details like json schema, class definitions>
Dependencies
<Describes what this story depends on. Dependent Stories and EPICs should be linked to the story.>
Acceptance Criteria (Mandatory)
<Describe edge cases to consider when implementing the story and defining tests>
<Provides a required and minimum list of acceptance tests for this story. More is expected as the engineer implements this story>
INVEST Checklist
Dependencies identified
Blockers noted and expected delivery timelines set
Design is implementable
Acceptance criteria agreed upon
Story estimated
Legend
Unknown
Verified
Unsatisfied
Done Checklist
- Code is completed, reviewed, documented and checked in
- Unit and integration test automation have been delivered and running cleanly in continuous integration/staging/canary environment
- Continuous Delivery pipeline(s) is able to proceed with new code included
- Customer facing documentation, API docs etc. are produced/updated, reviewed and published
- Acceptance criteria are met
1.
|
Bump golang.org/x/crypto CVE Triggers | Code Review | Savita . | ||
2.
|
Bump golang.org/x/crypto CVE - PAC | To Do | Zaki Shaikh | ||
3.
|
Bump golang.org/x/crypto CVE - Chains | To Do | Puneet Punamiya | ||
4.
|
Bump golang.org/x/crypto CVE - Results | To Do | Khurram Baig | ||
5.
|
Bump golang.org/x/crypto CVE - MAG | To Do | Puneet Punamiya | ||
6.
|
Bump golang.org/x/crypto CVE - Hub | To Do | Shiv Verma | ||
7.
|
Bump golang.org/x/crypto CVE - CLI | To Do | Divyanshu Agrawal | ||
8.
|
Bump golang.org/x/crypto CVE - Pipeline | Code Review | Vincent Demeester |