mirror of
https://github.com/open-policy-agent/opa.git
synced 2026-08-28 03:05:04 -06:00
Ashutosh Narkar
6e2facf01e
This change migrates the ORAS Go library from v1.2.2 to v2.
The OCI downloader which uses this lib was updated as per
the new API changes in the library.
The v1.2.2 of the ORAS library had a dependency on the docker package.
The library used a version of that package that had some
reported vulnerabilities such as CVE-2022-41716, CVE-2022-41720.
The ORAS Go library v2 removes the dependency on the docker package.
Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com>
(cherry picked from commit 83b1614c94)
98 lines
4.2 KiB
Modula-2
98 lines
4.2 KiB
Modula-2
module github.com/open-policy-agent/opa
|
|
|
|
go 1.18
|
|
|
|
require (
|
|
github.com/OneOfOne/xxhash v1.2.8
|
|
github.com/agnivade/levenshtein v1.1.1
|
|
github.com/andreyvit/diff v0.0.0-20170406064948-c7f18ee00883
|
|
github.com/bytecodealliance/wasmtime-go/v3 v3.0.2
|
|
github.com/containerd/containerd v1.6.16
|
|
github.com/dgraph-io/badger/v3 v3.2103.5
|
|
github.com/fortytw2/leaktest v1.3.0
|
|
github.com/foxcpp/go-mockdns v0.0.0-20210729171921-fb145fc6f897
|
|
github.com/fsnotify/fsnotify v1.6.0
|
|
github.com/ghodss/yaml v1.0.0
|
|
github.com/go-ini/ini v1.67.0
|
|
github.com/go-logr/logr v1.2.3
|
|
github.com/gobwas/glob v0.2.3
|
|
github.com/golang/protobuf v1.5.2
|
|
github.com/gorilla/mux v1.8.0
|
|
github.com/olekukonko/tablewriter v0.0.5
|
|
github.com/opencontainers/go-digest v1.0.0
|
|
github.com/opencontainers/image-spec v1.1.0-rc2
|
|
github.com/peterh/liner v0.0.0-20170211195444-bf27d3ba8e1d
|
|
github.com/prometheus/client_golang v1.14.0
|
|
github.com/rcrowley/go-metrics v0.0.0-20200313005456-10cdbea86bc0
|
|
github.com/sirupsen/logrus v1.9.0
|
|
github.com/spf13/cobra v1.6.1
|
|
github.com/spf13/pflag v1.0.5
|
|
github.com/stretchr/testify v1.8.1
|
|
github.com/tchap/go-patricia/v2 v2.3.1
|
|
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415
|
|
github.com/yashtewari/glob-intersection v0.1.0
|
|
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.32.0
|
|
go.opentelemetry.io/otel v1.7.0
|
|
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.7.0
|
|
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.7.0
|
|
go.opentelemetry.io/otel/sdk v1.7.0
|
|
go.opentelemetry.io/otel/trace v1.7.0
|
|
go.uber.org/automaxprocs v1.5.1
|
|
golang.org/x/net v0.5.0
|
|
golang.org/x/time v0.0.0-20210723032227-1f47c861a9ac
|
|
google.golang.org/grpc v1.52.3
|
|
gopkg.in/yaml.v2 v2.4.0
|
|
oras.land/oras-go/v2 v2.0.0
|
|
)
|
|
|
|
require (
|
|
github.com/beorn7/perks v1.0.1 // indirect
|
|
github.com/cenkalti/backoff/v4 v4.1.3 // indirect
|
|
github.com/cespare/xxhash v1.1.0 // indirect
|
|
github.com/cespare/xxhash/v2 v2.1.2 // indirect
|
|
github.com/cpuguy83/go-md2man/v2 v2.0.2 // indirect
|
|
github.com/davecgh/go-spew v1.1.1 // indirect
|
|
github.com/dgraph-io/ristretto v0.1.1 // indirect
|
|
github.com/dgryski/go-farm v0.0.0-20200201041132-a6ae2369ad13 // indirect
|
|
github.com/dustin/go-humanize v1.0.0 // indirect
|
|
github.com/felixge/httpsnoop v1.0.2 // indirect
|
|
github.com/go-logr/stdr v1.2.2 // indirect
|
|
github.com/gogo/protobuf v1.3.2 // indirect
|
|
github.com/golang/glog v1.0.0 // indirect
|
|
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
|
|
github.com/golang/snappy v0.0.4 // indirect
|
|
github.com/google/flatbuffers v1.12.1 // indirect
|
|
github.com/grpc-ecosystem/grpc-gateway/v2 v2.7.0 // indirect
|
|
github.com/inconshreveable/mousetrap v1.0.1 // indirect
|
|
github.com/klauspost/compress v1.13.6 // indirect
|
|
github.com/kr/text v0.2.0 // indirect
|
|
github.com/mattn/go-runewidth v0.0.9 // indirect
|
|
github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
|
|
github.com/miekg/dns v1.1.43 // indirect
|
|
github.com/moby/locker v1.0.1 // indirect
|
|
github.com/pkg/errors v0.9.1 // indirect
|
|
github.com/pmezard/go-difflib v1.0.0 // indirect
|
|
github.com/prometheus/client_model v0.3.0 // indirect
|
|
github.com/prometheus/common v0.37.0 // indirect
|
|
github.com/prometheus/procfs v0.8.0 // indirect
|
|
github.com/russross/blackfriday/v2 v2.1.0 // indirect
|
|
github.com/sergi/go-diff v1.1.0 // indirect
|
|
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
|
|
go.opencensus.io v0.23.0 // indirect
|
|
go.opentelemetry.io/otel/exporters/otlp/internal/retry v1.7.0 // indirect
|
|
go.opentelemetry.io/otel/metric v0.30.0 // indirect
|
|
go.opentelemetry.io/proto/otlp v0.16.0 // indirect
|
|
golang.org/x/sync v0.1.0 // indirect
|
|
golang.org/x/sys v0.4.0 // indirect
|
|
golang.org/x/text v0.6.0 // indirect
|
|
google.golang.org/genproto v0.0.0-20221118155620-16455021b5e6 // indirect
|
|
google.golang.org/protobuf v1.28.1 // indirect
|
|
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
)
|
|
|
|
// glog is only used through badger, and only for fatal log-and-exit. However, it comes
|
|
// at a cost, its init function will lookup the current user, and on Windows, that's much
|
|
// work.
|
|
replace github.com/golang/glog => ./build/replacements/github.com/golang/glog
|