Switch from dgrijalva/jwt-go to form3tech-oss/jwt-go.

dgrijalva/jwt-go has been abandoned and contains several serious
security issues. Most projects are now switching to the form3tech fork.

See https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMDGRIJALVAJWTGO-596515 for
info on the issues.

Signed-off-by: Dan Lorenc <dlorenc@google.com>
This commit is contained in:
Dan Lorenc
2020-12-24 07:50:50 -06:00
parent a4570a60e7
commit 5b90402082
10 changed files with 20 additions and 24 deletions

View File

@@ -5,8 +5,8 @@ go 1.15
require (
github.com/coreos/go-semver v0.3.0
github.com/coreos/go-systemd/v22 v22.1.0
github.com/dgrijalva/jwt-go v3.2.0+incompatible
github.com/dustin/go-humanize v1.0.0
github.com/form3tech-oss/jwt-go v3.2.2+incompatible
github.com/gogo/protobuf v1.3.1
github.com/golang/groupcache v0.0.0-20200121045136-8c9f03a8e57e
github.com/golang/protobuf v1.3.5