Merge pull request #20 from containerish/jwt-vulnerability-fix

fixed go.mod and jwt vulnerabilities
containerish · Sep 6, 2021 · 2511c34 · 2511c34
2 parents 86e9b17 + 239729c
commit 2511c34
Show file tree

Hide file tree

Showing 9 changed files with 195 additions and 118 deletions.
diff --git a/README.md b/README.md
@@ -33,6 +33,6 @@ docker pull openregistry.dev/janedoe/alpine:latest
 ### How to Run this project locally:
 OpenRegistry is not Go Gettable right now because of a dependency issue with Go-Skynet. To build this project locally, please use the following method:
 ```bash
-git clone https://github.com/jay-dee7/OpenRegistry.git
+git clone https://github.com/containerish/OpenRegistry.git
 make mod-fix
 go build
diff --git a/auth/auth.go b/auth/auth.go
@@ -1,8 +1,8 @@
 package auth
 
 import (
-	"github.com/jay-dee7/OpenRegistry/cache"
-	"github.com/jay-dee7/OpenRegistry/config"
+	"github.com/containerish/OpenRegistry/cache"
+	"github.com/containerish/OpenRegistry/config"
 	"github.com/labstack/echo/v4"
 )
 

diff --git a/cache/store.go b/cache/store.go
@@ -5,8 +5,8 @@ import (
 	"fmt"
 	"net/http"
 
+	"github.com/containerish/OpenRegistry/types"
 	badger "github.com/dgraph-io/badger/v3"
-	"github.com/jay-dee7/OpenRegistry/types"
 	"github.com/labstack/echo/v4"
 )
 

diff --git a/go.mod b/go.mod
@@ -1,64 +1,63 @@
-module github.com/jay-dee7/OpenRegistry
+module github.com/containerish/OpenRegistry
 
 go 1.17
 
 require (
 	github.com/NebulousLabs/go-skynet/v2 v2.0.2
-	github.com/dgraph-io/badger/v3 v3.2103.0
+	github.com/dgraph-io/badger/v3 v3.2103.1
 	github.com/docker/distribution v2.7.1+incompatible
-	github.com/fatih/color v1.7.0
-	github.com/golang-jwt/jwt v3.2.1+incompatible
+	github.com/fatih/color v1.12.0
+	github.com/golang-jwt/jwt v3.2.2+incompatible
 	github.com/labstack/echo-contrib v0.11.0
-	github.com/labstack/echo/v4 v4.3.0
-	github.com/mattn/go-isatty v0.0.13 // indirect
-	github.com/prometheus/common v0.28.0 // indirect
-	github.com/rs/zerolog v1.22.0
-	github.com/spf13/viper v1.7.1
+	github.com/labstack/echo/v4 v4.5.0
+	github.com/rs/zerolog v1.24.0
+	github.com/spf13/viper v1.8.1
 	github.com/whyrusleeping/tar-utils v0.0.0-20201201191210-20a61371de5b
-	gitlab.com/NebulousLabs/errors v0.0.0-20200929122200-06c536cf6975 // indirect
-	golang.org/x/crypto v0.0.0-20210513164829-c07d793c2f9a
-	golang.org/x/sys v0.0.0-20210608053332-aa57babbf139 // indirect
-	golang.org/x/time v0.0.0-20210608053304-ed9ce3a009e4 // indirect
-
+	golang.org/x/crypto v0.0.0-20210817164053-32db794688a5
 )
 
 require (
-	github.com/DataDog/zstd v1.4.1 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/cespare/xxhash v1.1.0 // indirect
 	github.com/cespare/xxhash/v2 v2.1.1 // indirect
-	github.com/dgraph-io/ristretto v0.0.4-0.20210309073149-3836124cdc5a // indirect
-	github.com/dgrijalva/jwt-go v3.2.0+incompatible // indirect
+	github.com/dgraph-io/ristretto v0.1.0 // indirect
 	github.com/dustin/go-humanize v1.0.0 // indirect
 	github.com/fsnotify/fsnotify v1.4.9 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
+	github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b // indirect
 	github.com/golang/groupcache v0.0.0-20200121045136-8c9f03a8e57e // indirect
 	github.com/golang/protobuf v1.5.2 // indirect
-	github.com/golang/snappy v0.0.1 // indirect
+	github.com/golang/snappy v0.0.3 // indirect
 	github.com/google/flatbuffers v1.12.0 // indirect
 	github.com/hashicorp/hcl v1.0.0 // indirect
+	github.com/klauspost/compress v1.12.3 // indirect
 	github.com/labstack/gommon v0.3.0 // indirect
-	github.com/magiconair/properties v1.8.1 // indirect
+	github.com/magiconair/properties v1.8.5 // indirect
 	github.com/mattn/go-colorable v0.1.8 // indirect
-	github.com/matttproud/golang_protobuf_extensions v1.0.2-0.20181231171920-c182affec369 // indirect
-	github.com/mitchellh/mapstructure v1.1.2 // indirect
-	github.com/pelletier/go-toml v1.8.1 // indirect
+	github.com/mattn/go-isatty v0.0.12 // indirect
+	github.com/matttproud/golang_protobuf_extensions v1.0.1 // indirect
+	github.com/mitchellh/mapstructure v1.4.1 // indirect
+	github.com/pelletier/go-toml v1.9.3 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
-	github.com/prometheus/client_golang v1.11.0 // indirect
+	github.com/prometheus/client_golang v1.10.0 // indirect
 	github.com/prometheus/client_model v0.2.0 // indirect
+	github.com/prometheus/common v0.25.0 // indirect
 	github.com/prometheus/procfs v0.6.0 // indirect
-	github.com/spf13/afero v1.2.2 // indirect
-	github.com/spf13/cast v1.3.0 // indirect
-	github.com/spf13/jwalterweatherman v1.0.0 // indirect
+	github.com/spf13/afero v1.6.0 // indirect
+	github.com/spf13/cast v1.3.1 // indirect
+	github.com/spf13/jwalterweatherman v1.1.0 // indirect
 	github.com/spf13/pflag v1.0.5 // indirect
 	github.com/subosito/gotenv v1.2.0 // indirect
 	github.com/valyala/bytebufferpool v1.0.0 // indirect
 	github.com/valyala/fasttemplate v1.2.1 // indirect
-	go.opencensus.io v0.22.5 // indirect
-	golang.org/x/net v0.0.0-20210525063256-abc453219eb5 // indirect
+	gitlab.com/NebulousLabs/errors v0.0.0-20171229012116-7ead97ef90b8 // indirect
+	go.opencensus.io v0.23.0 // indirect
+	golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4 // indirect
+	golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1 // indirect
 	golang.org/x/text v0.3.6 // indirect
+	golang.org/x/time v0.0.0-20201208040808-7e3f01d25324 // indirect
 	google.golang.org/protobuf v1.26.0 // indirect
-	gopkg.in/ini.v1 v1.51.0 // indirect
+	gopkg.in/ini.v1 v1.62.0 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 )