Update to Go 1.23 (#139)

* Update to Go 1.23 Signed-off-by: Jeffrey Friedman <[email protected]> * Raise Grype severity cutoff level Signed-off-by: Jeffrey Friedman <[email protected]> * Update Grype workflow action Signed-off-by: Jeffrey Friedman <[email protected]> * Update setup-go Go version Signed-off-by: Jeffrey Friedman <[email protected]> * Force usage of Go 1.23.2 in build job Signed-off-by: Jeffrey Friedman <[email protected]> --------- Signed-off-by: Jeffrey Friedman <[email protected]>
rad-security · Oct 28, 2024 · 22f1dca · 22f1dca
1 parent c34494f
commit 22f1dca
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 6 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -31,7 +31,8 @@ jobs:
 
       - uses: actions/setup-go@v5
         with:
-          go-version: '1.21'
+          # Force version to solve cache restore issue: https://github.com/actions/setup-go/issues/506
+          go-version: 1.23.2
           check-latest: true # https://github.com/actions/setup-go#check-latest-version
           cache: true # https://github.com/actions/setup-go#caching-dependency-files-and-build-outputs
 
@@ -51,11 +52,11 @@ jobs:
 
       - name: Grype scan
         id: scan
-        uses: anchore/scan-action@v3
+        uses: anchore/scan-action@v5
         with:
           path: "."
           fail-build: true
-          severity-cutoff: negligible
+          severity-cutoff: medium
           output-format: sarif
 
       - name: Upload SARIF report

diff --git a/go.mod b/go.mod
@@ -1,8 +1,6 @@
 module github.com/rad-security/kbom
 
-go 1.22.0
-
-toolchain go1.22.3
+go 1.23
 
 require (
 	github.com/CycloneDX/cyclonedx-go v0.7.2