Skip to content

Commit 8a96a1f

Browse files
cx-atish-jadhavcx-atish-jadhav
committed
Squashed commit of the following:
commit 8f8feb0 Author: Atish Jadhav <atish.jadhav@checkmarx.com> Date: Thu Jul 16 16:56:41 2026 +0530 Add session telemetry and expand SCA manifest support (AST-163052) (#1522) * Add session telemetry and expand SCA manifest support * vulnerability and trivy fixes * lint and unit test fixes * Update SCA remediation with cx-devassist-sca skill * removing unwanted comments * lint fixes
1 parent b103c0b commit 8a96a1f

17 files changed

Lines changed: 667 additions & 107 deletions

File tree

‎go.mod‎

Lines changed: 22 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -29,24 +29,23 @@ require (
2929
github.com/stretchr/testify v1.11.1
3030
github.com/tomnomnom/linkheader v0.0.0-20180905144013-02ca5825eb80
3131
github.com/xeipuuv/gojsonschema v1.2.0
32-
golang.org/x/crypto v0.52.0
33-
golang.org/x/sync v0.20.0
34-
golang.org/x/text v0.37.0
35-
google.golang.org/grpc v1.80.0
32+
golang.org/x/crypto v0.53.0
33+
golang.org/x/sync v0.21.0
34+
golang.org/x/text v0.39.0
35+
google.golang.org/grpc v1.81.1
3636
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af
3737
gopkg.in/yaml.v3 v3.0.1
3838
gotest.tools v2.2.0+incompatible
3939
)
4040

4141
require (
42-
cyphar.com/go-pathrs v0.2.1 // indirect
42+
cyphar.com/go-pathrs v0.2.4 // indirect
4343
github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6 // indirect
4444
github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20240914100643-eb91380d8434 // indirect
4545
github.com/Masterminds/semver v1.5.0 // indirect
4646
github.com/cespare/xxhash/v2 v2.3.0 // indirect
4747
github.com/clipperhouse/displaywidth v0.10.0 // indirect
4848
github.com/clipperhouse/uax29/v2 v2.6.0 // indirect
49-
github.com/coreos/go-systemd/v22 v22.7.0 // indirect
5049
github.com/distribution/distribution/v3 v3.1.1 // indirect
5150
github.com/docker/docker v28.0.3+incompatible // indirect
5251
github.com/docker/go-events v0.0.0-20250808211157-605354379745 // indirect
@@ -83,7 +82,7 @@ require (
8382
github.com/Masterminds/sprig/v3 v3.3.0 // indirect
8483
github.com/Masterminds/squirrel v1.5.4 // indirect
8584
github.com/Microsoft/go-winio v0.6.3-0.20251027160822-ad3df93bed29 // indirect
86-
github.com/Microsoft/hcsshim v0.15.0-rc.1 // indirect
85+
github.com/Microsoft/hcsshim v0.15.0-rc.3 // indirect
8786
github.com/ProtonMail/go-crypto v1.4.0 // indirect
8887
github.com/acobaugh/osrelease v0.1.0 // indirect
8988
github.com/adrg/xdg v0.5.3 // indirect
@@ -119,24 +118,23 @@ require (
119118
github.com/charmbracelet/x/term v0.2.2 // indirect
120119
github.com/cloudflare/circl v1.6.3 // indirect
121120
github.com/containerd/cgroups/v3 v3.1.3 // indirect
122-
github.com/containerd/containerd v1.7.30 // indirect
123-
github.com/containerd/containerd/api v1.9.0 // indirect
121+
github.com/containerd/containerd v1.7.33 // indirect
122+
github.com/containerd/containerd/api v1.10.0 // indirect
124123
github.com/containerd/continuity v0.5.0 // indirect
125124
github.com/containerd/errdefs v1.0.0 // indirect
126125
github.com/containerd/errdefs/pkg v0.3.0 // indirect
127126
github.com/containerd/fifo v1.1.0 // indirect
128127
github.com/containerd/log v0.1.0 // indirect
129128
github.com/containerd/platforms v1.0.0-rc.4 // indirect
130-
github.com/containerd/stargz-snapshotter/estargz v0.18.2 // indirect
131129
github.com/containerd/ttrpc v1.2.8 // indirect
132-
github.com/containerd/typeurl/v2 v2.2.3 // indirect
130+
github.com/containerd/typeurl/v2 v2.3.0 // indirect
133131
github.com/cyphar/filepath-securejoin v0.6.1 // indirect
134132
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
135133
github.com/deitch/magic v0.0.0-20240306090643-c67ab88f10cb // indirect
136134
github.com/distribution/reference v0.6.0 // indirect
137135
github.com/docker/cli v29.4.3+incompatible // indirect
138136
github.com/docker/docker-credential-helpers v0.9.5 // indirect
139-
github.com/docker/go-connections v0.6.0 // indirect
137+
github.com/docker/go-connections v0.7.0 // indirect
140138
github.com/docker/go-units v0.5.0 // indirect
141139
github.com/dsnet/compress v0.0.2-0.20230904184137-39efe44ab707 // indirect
142140
github.com/dustin/go-humanize v1.0.1 // indirect
@@ -174,7 +172,7 @@ require (
174172
github.com/google/btree v1.1.3 // indirect
175173
github.com/google/gnostic-models v0.7.0 // indirect
176174
github.com/google/go-cmp v0.7.0 // indirect
177-
github.com/google/go-containerregistry v0.21.5 // indirect
175+
github.com/google/go-containerregistry v0.21.6 // indirect
178176
github.com/google/licensecheck v0.3.1 // indirect
179177
github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83 // indirect
180178
github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect
@@ -199,7 +197,7 @@ require (
199197
github.com/json-iterator/go v1.1.12 // indirect
200198
github.com/kastenhq/goversion v0.0.0-20230811215019-93b2f8823953 // indirect
201199
github.com/kevinburke/ssh_config v1.2.0 // indirect
202-
github.com/klauspost/compress v1.18.5 // indirect
200+
github.com/klauspost/compress v1.18.6 // indirect
203201
github.com/klauspost/pgzip v1.2.6 // indirect
204202
github.com/lann/builder v0.0.0-20180802200727-47ae307949d0 // indirect
205203
github.com/lann/ps v0.0.0-20150810152359-62de8c46ede0 // indirect
@@ -271,7 +269,6 @@ require (
271269
github.com/therootcompany/xz v1.0.1 // indirect
272270
github.com/ulikunitz/xz v0.5.15 // indirect
273271
github.com/vbatts/go-mtree v0.7.0 // indirect
274-
github.com/vbatts/tar-split v0.12.2 // indirect
275272
github.com/vifraa/gopom v1.0.0 // indirect
276273
github.com/wagoodman/go-partybus v0.0.0-20230516145632-8ccac152c651 // indirect
277274
github.com/wagoodman/go-progress v0.0.0-20260303201901-10176f79b2c0 // indirect
@@ -288,20 +285,20 @@ require (
288285
go.opencensus.io v0.24.0 // indirect
289286
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
290287
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0 // indirect
291-
go.opentelemetry.io/otel v1.43.0 // indirect
292-
go.opentelemetry.io/otel/metric v1.43.0 // indirect
293-
go.opentelemetry.io/otel/trace v1.43.0 // indirect
288+
go.opentelemetry.io/otel v1.44.0 // indirect
289+
go.opentelemetry.io/otel/metric v1.44.0 // indirect
290+
go.opentelemetry.io/otel/trace v1.44.0 // indirect
294291
go.uber.org/mock v0.6.0 // indirect
295-
go.yaml.in/yaml/v2 v2.4.3 // indirect
292+
go.yaml.in/yaml/v2 v2.4.4 // indirect
296293
go.yaml.in/yaml/v3 v3.0.4 // indirect
297294
golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f // indirect
298-
golang.org/x/mod v0.35.0 // indirect
299-
golang.org/x/net v0.55.0 // indirect
295+
golang.org/x/mod v0.37.0 // indirect
296+
golang.org/x/net v0.56.0 // indirect
300297
golang.org/x/oauth2 v0.36.0 // indirect
301-
golang.org/x/sys v0.45.0 // indirect
302-
golang.org/x/term v0.43.0 // indirect
298+
golang.org/x/sys v0.46.0 // indirect
299+
golang.org/x/term v0.44.0 // indirect
303300
golang.org/x/time v0.15.0 // indirect
304-
golang.org/x/tools v0.44.0 // indirect
301+
golang.org/x/tools v0.47.0 // indirect
305302
golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect
306303
google.golang.org/genproto v0.0.0-20260128011058-8636f8732409 // indirect
307304
google.golang.org/genproto/googleapis/rpc v0.0.0-20260406210006-6f92a3bedf2d // indirect
@@ -333,9 +330,7 @@ require (
333330
sigs.k8s.io/yaml v1.6.0 // indirect
334331
)
335332

336-
replace github.com/containerd/containerd => github.com/containerd/containerd v1.7.33
337-
338-
replace github.com/containerd/containerd/v2 => github.com/containerd/containerd/v2 v2.1.5
333+
replace github.com/docker/go-connections => github.com/docker/go-connections v0.6.0
339334

340335
replace github.com/opencontainers/selinux => github.com/opencontainers/selinux v1.13.0
341336

0 commit comments

Comments
 (0)