Switch from dgrijalva/jwt-go to form3tech-oss/jwt-go.

dgrijalva/jwt-go has been abandoned and contains several serious
security issues. Most projects are now switching to the form3tech fork.

See https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMDGRIJALVAJWTGO-596515 for
info on the issues.

Signed-off-by: Dan Lorenc <dlorenc@google.com>
This commit is contained in:
Dan Lorenc
2020-12-24 07:50:50 -06:00
parent a4570a60e7
commit 5b90402082
10 changed files with 20 additions and 24 deletions

View File

@@ -98,15 +98,6 @@
}
]
},
{
"project": "github.com/dgrijalva/jwt-go",
"licenses": [
{
"type": "MIT License",
"confidence": 0.9891304347826086
}
]
},
{
"project": "github.com/dustin/go-humanize",
"licenses": [
@@ -125,6 +116,15 @@
}
]
},
{
"project": "github.com/form3tech-oss/jwt-go",
"licenses": [
{
"type": "MIT License",
"confidence": 0.9891304347826086
}
]
},
{
"project": "github.com/getsentry/raven-go",
"licenses": [