fix: Prevent mutation of cached feature resolution results #3515
security.yml
on: pull_request
Dependency Security Scan
5m 11s
Matrix: CodeQL Analysis
Matrix: govulncheck
Annotations
19 errors and 5 warnings
|
Go Vulnerability Check (feast-operator)
Process completed with exit code 3.
|
|
Go Vulnerability Check (feast-operator)
controller.FeatureStoreReconciler.Reconcile calls client.subResourceClient.Update, which eventually calls norm.Form.String
|
|
Go Vulnerability Check (feast-operator)
controller.FeatureStoreReconciler.Reconcile calls client.subResourceClient.Update, which eventually calls norm.Form.QuickSpan
|
|
Go Vulnerability Check (feast-operator)
controller.FeatureStoreReconciler.Reconcile calls client.subResourceClient.Update, which eventually calls norm.Form.IsNormalString
|
|
Go Vulnerability Check (feast-operator)
controller.FeatureStoreReconciler.Reconcile calls client.subResourceClient.Update, which eventually calls norm.Form.Bytes
|
|
Go Vulnerability Check (feast-operator)
utils.ApplyFeastYamlAndVerify calls exec.Command, which eventually calls transport.http2Client.GracefulClose
|
|
Go Vulnerability Check (feast-operator)
utils.ApplyFeastYamlAndVerify calls exec.Command, which eventually calls transport.http2Client.Close
|
|
Go Vulnerability Check (feast-operator)
utils.ApplyFeastYamlAndVerify calls exec.Command, which eventually calls transport.NewHTTP2Client
|
|
Go Vulnerability Check (go-feature-server)
serving.transformationServiceClient.TransformFeatures calls grpc.ClientConn.Invoke, which eventually calls transport.Stream.ReadMessageHeader
|
|
Go Vulnerability Check (go-feature-server)
serving.transformationServiceClient.TransformFeatures calls grpc.ClientConn.Invoke, which eventually calls transport.ServerStream.Read
|
|
Go Vulnerability Check (go-feature-server)
embedded.OnlineFeatureService.StartGrpcServerWithLogging calls grpc.Server.Serve, which eventually calls transport.NewServerTransport
|
|
Go Vulnerability Check (go-feature-server)
registry.file_feast_registry_RegistryServer_proto_rawDescGZIP calls sync.Once.Do, which eventually calls transport.NewHTTP2Client
|
|
Go Vulnerability Check (go-feature-server)
serving.transformationServiceClient.TransformFeatures calls grpc.ClientConn.Invoke, which eventually calls transport.ClientStream.Write
|
|
Go Vulnerability Check (go-feature-server)
serving.transformationServiceClient.TransformFeatures calls grpc.ClientConn.Invoke, which eventually calls transport.ClientStream.TrailersOnly
|
|
Go Vulnerability Check (go-feature-server)
serving.transformationServiceClient.TransformFeatures calls grpc.ClientConn.Invoke, which eventually calls transport.ClientStream.RecvCompress
|
|
Go Vulnerability Check (go-feature-server)
serving.transformationServiceClient.TransformFeatures calls grpc.ClientConn.Invoke, which eventually calls transport.ClientStream.Read
|
|
Go Vulnerability Check (go-feature-server)
serving.transformationServiceClient.TransformFeatures calls grpc.ClientConn.Invoke, which eventually calls transport.ClientStream.Header
|
|
Go Vulnerability Check (go-feature-server)
serving.transformationServiceClient.TransformFeatures calls grpc.ClientConn.Invoke, which eventually calls transport.ClientStream.Close
|
|
Dependency Security Scan
Process completed with exit code 1.
|
|
Go Vulnerability Check (feast-operator)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-go@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
CodeQL Analysis (javascript-typescript)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
CodeQL Analysis (python)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Go Vulnerability Check (go-feature-server)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-go@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Dependency Security Scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|