Skip to content

Conversation

@matsoob
Copy link

@matsoob matsoob commented Nov 13, 2025

Addresses:
#1332
#1327

From local build and trivy check after this change:


Report Summary

┌──────────────────────────────┬──────────┬─────────────────┬─────────┐
│            Target            │   Type   │ Vulnerabilities │ Secrets │
├──────────────────────────────┼──────────┼─────────────────┼─────────┤
│ 71a588e905d0 (alpine 3.21.5) │  alpine  │        0        │    -    │
├──────────────────────────────┼──────────┼─────────────────┼─────────┤
│ usr/local/bin/migrate        │ gobinary │        0        │    -    │
└──────────────────────────────┴──────────┴─────────────────┴─────────┘

Copilot AI review requested due to automatic review settings November 13, 2025 23:42
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates the Go version in the Docker image from 1.24 to 1.25 to address security vulnerabilities identified in issues #1332 and #1327. The update resolves all previously reported vulnerabilities, as confirmed by the Trivy scan showing zero vulnerabilities in both the Alpine base image and the compiled Go binary.

Key Changes:

  • Upgraded Go runtime version in Docker builder stage from 1.24 to 1.25

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@coveralls
Copy link

Coverage Status

coverage: 54.037%. remained the same
when pulling ce3cb72 on matsoob:updateGoInBaseImage
into 39ab04d on golang-migrate:master.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants