Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Migrate from github.com/mailru/easyjson #68

Open
RichardoC opened this issue Apr 10, 2023 · 1 comment
Open

Migrate from github.com/mailru/easyjson #68

RichardoC opened this issue Apr 10, 2023 · 1 comment

Comments

@RichardoC
Copy link

This library hasn't released an updated version in 2 years, and the maintaining company is subject to EU sanctions.

Given this, it might be better to migrate to another library.

This drive by is because the Kubernetes clients are dependant via your library.

Thanks!

@havardelnan
Copy link

Falco picked up this 2024-02-26T22:33, im not sure if its a false positive but its a bit suspicious as we have built this almost every day without a problem.

{
    "output": "2024-02-26T22:33:11.165254872+0000: Warning Sensitive file opened for reading by non-trusted program (user=<NA> user_loginuid=-1 program=compile command=compile -o /tmp/go-build779975163/b476/_pkg_.a -trimpath /tmp/go-build779975163/b476=> -p github.com/mailru/easyjson/buffer -lang=go1.12 -complete -buildid -OGlPEiKYrm3GXpAsMZO/-OGlPEiKYrm3GXpAsMZO -goversion go1.22.0 -c=4 -nolocalimports -importcfg /tmp/go-build779975163/b476/importcfg -pack /builds/.../.go/pkg/mod/github.com/mailru/[email protected]/buffer/pool.go file=/etc/shadow parent=<NA> gparent=<NA> ggparent=<NA> gggparent=<NA> container_id=host image=<NA>) k8s.ns=<NA> k8s.pod=<NA> container=host k8s.ns=<NA> k8s.pod=<NA> container=host k8s.ns=<NA> k8s.pod=<NA> container=host k8s.ns=<NA> k8s.pod=<NA> container=host",
    "priority": "Warning",
    "rule": "Read sensitive file untrusted",
    "source": "syscall",
    "tags": [
        "filesystem",
        "mitre_credential_access",
        "mitre_discovery"
    ],
    "time": "2024-02-26T22:33:11.165254872Z",
    "output_fields": {
        "container.id": "host",
        "container.image.repository": null,
        "evt.time.iso8601": 1708986791165254872,
        "fd.name": "/etc/shadow",
        "k8s.ns.name": null,
        "k8s.pod.name": null,
        "proc.aname[2]": null,
        "proc.aname[3]": null,
        "proc.aname[4]": null,
        "proc.cmdline": "compile -o /tmp/go-build779975163/b476/_pkg_.a -trimpath /tmp/go-build779975163/b476=> -p github.com/mailru/easyjson/buffer -lang=go1.12 -complete -buildid -OGlPEiKYrm3GXpAsMZO/-OGlPEiKYrm3GXpAsMZO -goversion go1.22.0 -c=4 -nolocalimports -importcfg /tmp/go-build779975163/b476/importcfg -pack /builds/.../.go/pkg/mod/github.com/mailru/[email protected]/buffer/pool.go",
        "proc.name": "compile",
        "proc.pname": null,
        "user.loginuid": -1,
        "user.name": null
    }
}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants