Replace curl | sh with go install in etc/golangci-lint.sh

XMLWordPrintableJSON

    • Type: Task
    • Resolution: Done
    • Priority: Unknown
    • None
    • Affects Version/s: None
    • Component/s: None
    • None
    • None
    • Go Drivers
    • Hide

      1. What would you like to communicate to the user about this feature?
      2. Would you like the user to see examples of the syntax and/or executable code and its output?
      3. Which versions of the driver/connector does this apply to?

      Show
      1. What would you like to communicate to the user about this feature? 2. Would you like the user to see examples of the syntax and/or executable code and its output? 3. Which versions of the driver/connector does this apply to?
    • None
    • None
    • None
    • None
    • None
    • None

      etc/golangci-lint.sh installs golangci-lint via curl|sh, a known supply-chain attack vector that is also blocked by endpoint-security tooling on MongoDB-issued machines, preventing `task lint` from running locally.

            Assignee:
            Preston Vasquez
            Reporter:
            Preston Vasquez
            Qingyang Hu
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: