Uploaded image for project: 'Go Driver'
  1. Go Driver
  2. GODRIVER-3185

SSDLC Third Party Dependencies

XMLWordPrintableJSON

    • Type: Icon: Task Task
    • Resolution: Duplicate
    • Priority: Icon: Unknown Unknown
    • None
    • Affects Version/s: None
    • Component/s: None
    • None
    • Go Drivers
    • Hide

      1. What would you like to communicate to the user about this feature?
      2. Would you like the user to see examples of the syntax and/or executable code and its output?
      3. Which versions of the driver/connector does this apply to?

      Show
      1. What would you like to communicate to the user about this feature? 2. Would you like the user to see examples of the syntax and/or executable code and its output? 3. Which versions of the driver/connector does this apply to?

      Context

      Since we do not bundle any dependencies, and our go.mod versions can be overridden by users, we do not need to use snyk.  However, we should still incorporate dependabot on the repo as a best practice.

      Definition of done

      Incorporate dependabot config for GitHub Actions and Go.

      Pitfalls

      N/A

            Assignee:
            steve.silvester@mongodb.com Steve Silvester
            Reporter:
            steve.silvester@mongodb.com Steve Silvester
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: