access-engine/go.mod
tegwick f4c9f2beeb
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Build and Publish Container Image / build-and-push (push) Successful in 2m29s
FLEX-WP-0040-T07: build with Go 1.26.10 (stdlib HIGH CVEs)
Founder decision 2026-11-01: the v14 release must meet the zero HIGH/CRITICAL
bar. Trivy found CVE-2026-111943, -78667, -78669 and -97031 in Go stdlib
1.26.7 (fixed in 1.26.9/1.26.10). Builder image golang:1.26.10-alpine
(index sha256:a2012b4a1d1f9f7e9f44e0d39b805a901e856b1dd80b4e6ee4338db547050308)
and go.mod go 1.26.10; runtime base unchanged. make test (race), go vet and
both compact-sitting policy packages (v14 46 tests, v13 32 tests) pass on
go1.26.10. Containerfile and go.mod trigger .forgejo/workflows/image.yaml.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
2026-11-01 11:45:39 +01:00

44 lines
1.9 KiB
Modula-2

module github.com/netkingdom/access-engine
go 1.26.10
require (
github.com/netkingdom/approval-engine/adapters/go/approvalfact v0.0.0
github.com/open-policy-agent/opa v1.4.0
gopkg.in/yaml.v3 v3.0.1
)
require (
github.com/agnivade/levenshtein v1.2.1 // indirect
github.com/beorn7/perks v1.0.1 // indirect
github.com/cespare/xxhash/v2 v2.3.0 // indirect
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
github.com/go-ini/ini v1.67.0 // indirect
github.com/go-logr/logr v1.4.3 // indirect
github.com/go-logr/stdr v1.2.2 // indirect
github.com/gobwas/glob v0.2.3 // indirect
github.com/google/uuid v1.6.0 // indirect
github.com/gorilla/mux v1.8.1 // indirect
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
github.com/prometheus/client_golang v1.21.1 // indirect
github.com/prometheus/client_model v0.6.1 // indirect
github.com/prometheus/common v0.62.0 // indirect
github.com/prometheus/procfs v0.15.1 // indirect
github.com/rcrowley/go-metrics v0.0.0-20200313005456-10cdbea86bc0 // indirect
github.com/sirupsen/logrus v1.9.3 // indirect
github.com/tchap/go-patricia/v2 v2.3.2 // indirect
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
github.com/yashtewari/glob-intersection v0.2.0 // indirect
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
go.opentelemetry.io/otel v1.43.0 // indirect
go.opentelemetry.io/otel/metric v1.43.0 // indirect
go.opentelemetry.io/otel/sdk v1.43.0 // indirect
go.opentelemetry.io/otel/trace v1.43.0 // indirect
golang.org/x/sys v0.42.0 // indirect
google.golang.org/protobuf v1.36.6 // indirect
sigs.k8s.io/yaml v1.4.0 // indirect
)
replace github.com/netkingdom/approval-engine/adapters/go/approvalfact => ./third_party/approvalfact