Update Go to 1.19.2 (#219)

.github/workflows/azure-snp-reporter.yml

@@ -20,7 +20,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: 1.18
+          go-version: 1.19.2
 
       - name: Build and upload azure SNP reporter container image
         id: build-and-upload
@@ -30,7 +30,6 @@ jobs:
           dockerfile: ./hack/azure-snp-report-verify/Dockerfile
           githubToken: ${{ secrets.GITHUB_TOKEN }}
 
-
   fetch-snp-report:
     needs: build-snp-reporter
     name: "Fetch SNP report"
@@ -68,7 +67,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: 1.18
+          go-version: 1.19.2
 
       - name: Download report JWT
         uses: actions/download-artifact@v3

.github/workflows/build-access-manager-image.yml

@@ -26,7 +26,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Build and upload access-manager container image
         id: build-and-upload

.github/workflows/build-binaries.yml

@@ -29,7 +29,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Build the bootstrapper
         uses: ./.github/actions/build_bootstrapper
@@ -45,7 +45,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Build debugd
         uses: ./.github/actions/build_debugd
@@ -61,7 +61,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Build cdbg (Linux, amd64)
         uses: ./.github/actions/build_cdbg
@@ -86,7 +86,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
       - name: Build cdbg (macOS, amd64)
         uses: ./.github/actions/build_cdbg
         with:
@@ -110,7 +110,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
       - name: Build disk-mapper
         uses: ./.github/actions/build_disk_mapper
 
@@ -125,7 +125,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Build CLI (Linux, amd64)
         uses: ./.github/actions/build_cli
@@ -150,7 +150,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Build CLI (macOS, amd64)
         uses: ./.github/actions/build_cli

.github/workflows/build-constellation-node-operator.yml

@@ -22,7 +22,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Build and upload constellation-node-operator container image
         uses: ./.github/actions/build_operator

.github/workflows/build-coreos.yml

@@ -38,7 +38,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Build bootstrapper
         if: ${{ inputs.debug == false }}

.github/workflows/build-joinservice-image.yml

@@ -28,7 +28,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Build and upload join-service container image
         id: build-and-upload

.github/workflows/build-kms-image.yml

@@ -27,7 +27,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Build and upload KMS server container image
         id: build-and-upload

.github/workflows/build-micro-service-manual.yml

@@ -36,7 +36,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       # choose the correct Dockerfile depending on what micro-service is being build
       - name: Set Dockerfile variable

.github/workflows/build-operator-manual.yml

@@ -20,7 +20,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Build and upload constellation-node-operator container image
         uses: ./.github/actions/build_operator

.github/workflows/build-verification-service.yml

@@ -24,7 +24,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Build and upload verification-service container image
         id: build-and-upload

.github/workflows/check-licenses.yml

@@ -22,7 +22,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
           cache: true
 
       - name: Install go-licenses

.github/workflows/e2e-test-azure-weekly.yml

@@ -21,7 +21,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Login to Azure
         uses: ./.github/actions/azure_login

.github/workflows/e2e-test-azure.yml

@@ -16,7 +16,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Login to Azure
         uses: ./.github/actions/azure_login
@@ -88,7 +88,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Login to Azure
         uses: ./.github/actions/azure_login

.github/workflows/e2e-test-gcp-weekly.yml

@@ -21,7 +21,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Run GCP E2E test
         uses: ./.github/actions/e2e_test

.github/workflows/e2e-test-gcp.yml

@@ -16,7 +16,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Run GCP E2E test
         uses: ./.github/actions/e2e_test
@@ -63,7 +63,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Run GCP E2E test
         uses: ./.github/actions/e2e_test

.github/workflows/e2e-test-manual-macos.yml

@@ -53,7 +53,7 @@ jobs:
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         if: ${{ github.event.steps.check-bootstrapper-cache.cache-hit != 'true'}}
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Check out repository
         if: ${{ github.event.steps.check-bootstrapper-cache.cache-hit != 'true'}}
@@ -82,7 +82,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Login to Azure
         if: ${{ github.event.inputs.cloudProvider == 'azure' }}

.github/workflows/e2e-test-manual.yml

@@ -52,7 +52,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Login to Azure
         if: ${{ github.event.inputs.cloudProvider == 'azure' }}

.github/workflows/generate-measurements.yml

@@ -30,7 +30,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Login to Azure
         if: ${{ github.event.inputs.cloudProvider == 'azure' }}

.github/workflows/release-cli.yml

@@ -14,7 +14,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Build cli-linux-amd64
         uses: ./.github/actions/build_cli

.github/workflows/test-govulncheck.yml

@@ -31,7 +31,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
           cache: true
 
       - name: Get Go submodules

.github/workflows/test-integration.yml

@@ -30,7 +30,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
           cache: true
 
       - name: Install Dependencies

.github/workflows/test-lint.yml

@@ -36,7 +36,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
           cache: true
 
       - name: Get Go submodules

.github/workflows/test-tidy.yml

@@ -28,7 +28,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
 
       - name: Get Go submodules
         id: submods

.github/workflows/test-unittest.yml

@@ -30,7 +30,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
           cache: true
 
       - name: Install Dependencies
@@ -54,7 +54,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
           cache: true
 
       - name: CLI Unit Tests

.github/workflows/update-cli-reference.yml

@@ -20,7 +20,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f
         with:
-          go-version: "1.19.1"
+          go-version: "1.19.2"
           cache: true
 
       - name: Generate reference docs

3rdparty/gcp-guest-agent/Dockerfile

@@ -6,7 +6,7 @@ RUN apt-get update && apt-get install -y \
     git
 
 # Install Go
-ARG GO_VER=1.19.1
+ARG GO_VER=1.19.2
 RUN wget -q https://go.dev/dl/go${GO_VER}.linux-amd64.tar.gz && \
     tar -C /usr/local -xzf go${GO_VER}.linux-amd64.tar.gz && \
     rm go${GO_VER}.linux-amd64.tar.gz

CHANGELOG.md

@@ -45,7 +45,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Fixed
 
 ### Security
-<!-- In case of vulnerabilities. -->
+Vulnerability inside the Go standard library fixed by updating to Go 1.19.2:
+- [GO-2022-1037](https://pkg.go.dev/vuln/GO-2022-1037) ([CVE-2022-2879](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2879))
+- [GO-2022-1038](https://pkg.go.dev/vuln/GO-2022-1038) ([CVE-2022-2880](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2880))
+- [GO-2022-0969](https://pkg.go.dev/vuln/GO-2022-0969) ([CVE-2022-27664](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27664))
+
 ### Internal
 
 ## [2.0.0] - 2022-09-12

Dockerfile.build

@@ -5,7 +5,7 @@ RUN dnf -y update && \
     dnf clean all
 
 # Install Go
-ARG GO_VER=1.19.1
+ARG GO_VER=1.19.2
 RUN wget -q https://go.dev/dl/go${GO_VER}.linux-amd64.tar.gz && \
     tar -C /usr/local -xzf go${GO_VER}.linux-amd64.tar.gz && \
     rm go${GO_VER}.linux-amd64.tar.gz

access_manager/Dockerfile

@@ -5,7 +5,7 @@ RUN dnf -y update && \
     dnf clean all
 
 # Install Go
-ARG GO_VER=1.19.1
+ARG GO_VER=1.19.2
 RUN wget -q https://go.dev/dl/go${GO_VER}.linux-amd64.tar.gz && \
     tar -C /usr/local -xzf go${GO_VER}.linux-amd64.tar.gz && \
     rm go${GO_VER}.linux-amd64.tar.gz

hack/qemu-metadata-api/Dockerfile

@@ -4,7 +4,7 @@ RUN dnf -y update && \
     dnf -y install libvirt-devel @development-tools pkg-config wget git && \
     dnf clean all
 
-ARG GO_VER=1.19.1
+ARG GO_VER=1.19.2
 RUN wget -q https://go.dev/dl/go${GO_VER}.linux-amd64.tar.gz && \
     tar -C /usr/local -xzf go${GO_VER}.linux-amd64.tar.gz && \
     rm go${GO_VER}.linux-amd64.tar.gz

joinservice/Dockerfile

@@ -5,7 +5,7 @@ RUN dnf -y update && \
     dnf clean all
 
 # Install Go
-ARG GO_VER=1.19.1
+ARG GO_VER=1.19.2
 RUN wget -q https://go.dev/dl/go${GO_VER}.linux-amd64.tar.gz && \
     tar -C /usr/local -xzf go${GO_VER}.linux-amd64.tar.gz && \
     rm go${GO_VER}.linux-amd64.tar.gz

kms/Dockerfile

@@ -4,7 +4,7 @@ RUN dnf -y update && \
     dnf install -y wget git
 
 # Install Go
-ARG GO_VER=1.19.1
+ARG GO_VER=1.19.2
 RUN wget -q https://go.dev/dl/go${GO_VER}.linux-amd64.tar.gz && \
     tar -C /usr/local -xzf go${GO_VER}.linux-amd64.tar.gz && \
     rm go${GO_VER}.linux-amd64.tar.gz

operators/constellation-node-operator/Dockerfile

@@ -1,5 +1,5 @@
 # Build the manager binary
-FROM golang:1.18 as builder
+FROM golang:1.19.2 as builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests

proto/Dockerfile.gen-proto

@@ -1,6 +1,6 @@
 FROM ubuntu@sha256:7cc0576c7c0ec2384de5cbf245f41567e922aab1b075f3e8ad565f508032df17 as build
 
-ARG GO_VER=1.19.1
+ARG GO_VER=1.19.2
 ARG GEN_GO_VER=1.28.0
 ARG GEN_GO_GRPC_VER=1.2.0
 ARG PB_VER=3.20.1

verify/Dockerfile

@@ -5,7 +5,7 @@ RUN dnf -y update && \
     dnf clean all
 
 # Install Go
-ARG GO_VER=1.19.1
+ARG GO_VER=1.19.2
 RUN wget -q https://go.dev/dl/go${GO_VER}.linux-amd64.tar.gz && \
     tar -C /usr/local -xzf go${GO_VER}.linux-amd64.tar.gz && \
     rm go${GO_VER}.linux-amd64.tar.gz