Migrate from github.com/mailru/easyjson

[RichardoC]

This library hasn't released an updated version in 2 years, and the maintaining company is subject to EU sanctions.

Given this, it might be better to migrate to another library.

This drive by is because the Kubernetes clients are dependant via your library.

Thanks!

[havardelnan]

Falco picked up this 2024-02-26T22:33, im not sure if its a false positive but its a bit suspicious as we have built this almost every day without a problem.

{
    "output": "2024-02-26T22:33:11.165254872+0000: Warning Sensitive file opened for reading by non-trusted program (user=<NA> user_loginuid=-1 program=compile command=compile -o /tmp/go-build779975163/b476/_pkg_.a -trimpath /tmp/go-build779975163/b476=> -p github.com/mailru/easyjson/buffer -lang=go1.12 -complete -buildid -OGlPEiKYrm3GXpAsMZO/-OGlPEiKYrm3GXpAsMZO -goversion go1.22.0 -c=4 -nolocalimports -importcfg /tmp/go-build779975163/b476/importcfg -pack /builds/.../.go/pkg/mod/github.com/mailru/[email protected]/buffer/pool.go file=/etc/shadow parent=<NA> gparent=<NA> ggparent=<NA> gggparent=<NA> container_id=host image=<NA>) k8s.ns=<NA> k8s.pod=<NA> container=host k8s.ns=<NA> k8s.pod=<NA> container=host k8s.ns=<NA> k8s.pod=<NA> container=host k8s.ns=<NA> k8s.pod=<NA> container=host",
    "priority": "Warning",
    "rule": "Read sensitive file untrusted",
    "source": "syscall",
    "tags": [
        "filesystem",
        "mitre_credential_access",
        "mitre_discovery"
    ],
    "time": "2024-02-26T22:33:11.165254872Z",
    "output_fields": {
        "container.id": "host",
        "container.image.repository": null,
        "evt.time.iso8601": 1708986791165254872,
        "fd.name": "/etc/shadow",
        "k8s.ns.name": null,
        "k8s.pod.name": null,
        "proc.aname[2]": null,
        "proc.aname[3]": null,
        "proc.aname[4]": null,
        "proc.cmdline": "compile -o /tmp/go-build779975163/b476/_pkg_.a -trimpath /tmp/go-build779975163/b476=> -p github.com/mailru/easyjson/buffer -lang=go1.12 -complete -buildid -OGlPEiKYrm3GXpAsMZO/-OGlPEiKYrm3GXpAsMZO -goversion go1.22.0 -c=4 -nolocalimports -importcfg /tmp/go-build779975163/b476/importcfg -pack /builds/.../.go/pkg/mod/github.com/mailru/[email protected]/buffer/pool.go",
        "proc.name": "compile",
        "proc.pname": null,
        "user.loginuid": -1,
        "user.name": null
    }
}