Bump to go >= 1.17.1
pjachowi opened this issue · comments
Because of bug golang/go#47801 Twistlock recognized grpc-health-probe as having high vulnerability. The problem is fixed in go 1.17.1
The build 0.4.6 already contains golang in updated version.
Fyi unless the exploits actually apply to this tool, we don't update the versions and make a new release.
The source of this alert was exactly the same as for #77