Repository navigation

fix: 批1 缺陷修复——哨兵穿透/溢出/EOF 契约/尾点变体/2038 截断/构造期校验（#383 #388 #389 #406 #407 #408 #413） - #421

Merged

zy84338719 merged 3 commits into

mainfrom

sweep/20261112-l1

Nov 12, 2026

Merged

fix: 批1 缺陷修复——哨兵穿透/溢出/EOF 契约/尾点变体/2038 截断/构造期校验（#383 #388 #389 #406 #407 #408 #413）#421
zy84338719 merged 3 commits into
mainfrom
sweep/20261112-l1

Annotations

10 errors and 1 notice

govulncheck

tarx.VerifyManifest calls io.Copy, which eventually calls http.body.Read

govulncheck

httpjson.DoRaw calls http.body.Close

govulncheck

httpjson.RetryAfterTransport.RoundTrip calls http.Transport.RoundTrip

govulncheck

httpjson.parseRetryAfter calls http.ParseTime

govulncheck

httpjson.DoRaw calls http.NewRequestWithContext

govulncheck

webhook.HMACSigner.Sign calls http.Header.Set

govulncheck

convert.GetClientIPWithProxiesAndXRI calls http.Header.Get

govulncheck

pack.Writer.Close calls zip.Writer.Close, which eventually calls http.Header.Del

govulncheck

httpjson.DoRaw calls http.Client.Do

govulncheck

pack.Writer.Close calls zip.Writer.Close, which eventually calls http.CanonicalHeaderKey

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"