Affected by GO-2022-0502 and 2 other vulnerabilities

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

api/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Path	Synopsis
applications Package applications is a reverse proxy.	Package applications is a reverse proxy.
core Package api is a reverse proxy.	Package api is a reverse proxy.
profiles Package profiles is a reverse proxy.	Package profiles is a reverse proxy.