Skip to content
This repository was archived by the owner on Nov 6, 2025. It is now read-only.

feat: check mode compatibility - #352

Draft
artis3n wants to merge 2 commits into
mainfrom
check-mode
Draft

feat: check mode compatibility#352
artis3n wants to merge 2 commits into
mainfrom
check-mode

Conversation

@artis3n

@artis3n artis3n commented Jun 23, 2023

Copy link
Copy Markdown
Owner

Working on implementation for artis3n/ansible-collection-tailscale#34

@artis3n
artis3n temporarily deployed to E2E June 23, 2023 23:34 — with GitHub Actions Inactive
@artis3n
artis3n temporarily deployed to E2E June 23, 2023 23:34 — with GitHub Actions Inactive
@artis3n
artis3n temporarily deployed to E2E June 23, 2023 23:34 — with GitHub Actions Inactive
@artis3n
artis3n temporarily deployed to E2E June 23, 2023 23:34 — with GitHub Actions Inactive
@artis3n
artis3n temporarily deployed to E2E June 23, 2023 23:34 — with GitHub Actions Inactive
The `tailscale status --json` is purely gathering data (doesn't change anything), so it's ok to run this in check mode.
@ghost

ghost commented May 30, 2024

Copy link
Copy Markdown

Semgrep found 1 ssc-f81fb526-8a62-4b49-a50c-82e2e14c7a87 finding:

Risk: certifi versions >= 2015.04.28 before 2023.07.22 are vulnerable to Insufficient Verification Of Data Authenticity. These versions use E-Tugra as a Certificate Authority, which is not recommended due to critical security vulnerabilities, such as the usage of default credentials in administrative tools, re-issuance of certificates without proper validation, and unauthorized access to sensitive information.

Fix: Upgrade this library to at least version 2023.7.22 at ansible-role-tailscale/poetry.lock:191.

Reference(s): GHSA-xqr8-7jwr-rhp7, CVE-2023-37920

Ignore this finding from ssc-f81fb526-8a62-4b49-a50c-82e2e14c7a87.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants