+6 -1

cmd/no-way-to-prevent-this/main.go

reviewed

··· 5 5 "os" 6 6 "text/template" 7 7 "time" 8 8 + 9 9 + "github.com/go-faker/faker/v4" 8 10 ) 9 11 10 12 var ( ··· 25 27 panic(err) 26 28 } 27 29 defer fout.Close() 30 30 + 31 31 + name := faker.Name() 28 32 29 33 data := map[string]string{ 30 34 "Date": *date, ··· 33 37 "Project": *project, 34 38 "ProjectLink": *projectLink, 35 39 "Summary": *summary, 40 40 + "Name": name, 36 41 } 37 42 38 43 tmpl := template.Must(template.New("article").Parse(articleTemplate)) ··· 55 60 In the hours following the release of [{{.CVE}}]({{.CVELink}}) for the project [{{.Project}}]({{.ProjectLink}}), site reliability workers 56 61 and systems administrators scrambled to desperately rebuild and patch all their systems to fix {{.Summary}}. This is due to the affected components being 57 62 written in C, the only programming language where these vulnerabilities regularly happen. "This was a terrible tragedy, but sometimes 58 58 - these things just happen and there's nothing anyone can do to stop them," said programmer Willodean Santorella, echoing statements 63 63 + these things just happen and there's nothing anyone can do to stop them," said programmer {{.Name}}, echoing statements 59 64 expressed by hundreds of thousands of programmers who use the only language where 90% of the world's memory safety vulnerabilities have 60 65 occurred in the last 50 years, and whose projects are 20 times more likely to have security vulnerabilities. "It's a shame, but what can 61 66 we do? There really isn't anything we can do to prevent memory safety vulnerabilities from happening if the programmer doesn't want to

+1

go.mod

reviewed

··· 48 48 github.com/facebookgo/ensure v0.0.0-20200202191622-63f1cf65ac4c // indirect 49 49 github.com/facebookgo/subset v0.0.0-20200203212716-c811ad88dec4 // indirect 50 50 github.com/fxamacker/cbor/v2 v2.5.0 // indirect 51 51 + github.com/go-faker/faker/v4 v4.2.0 // indirect 51 52 github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect 52 53 github.com/go-git/go-billy/v5 v5.5.0 // indirect 53 54 github.com/go-ole/go-ole v1.3.0 // indirect

+2

go.sum

reviewed

··· 101 101 github.com/github/fakeca v0.1.0/go.mod h1:+bormgoGMMuamOscx7N91aOuUST7wdaJ2rNjeohylyo= 102 102 github.com/gliderlabs/ssh v0.3.5 h1:OcaySEmAQJgyYcArR+gGGTHCyE7nvhEMTlYY+Dp8CpY= 103 103 github.com/gliderlabs/ssh v0.3.5/go.mod h1:8XB4KraRrX39qHhT6yxPsHedjA08I/uBVwj4xC+/+z4= 104 104 + github.com/go-faker/faker/v4 v4.2.0 h1:dGebOupKwssrODV51E0zbMrv5e2gO9VWSLNC1WDCpWg= 105 105 + github.com/go-faker/faker/v4 v4.2.0/go.mod h1:F/bBy8GH9NxOxMInug5Gx4WYeG6fHJZ8Ol/dhcpRub4= 104 106 github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 h1:+zs/tPmkDkHx3U66DAb0lQFJrpS6731Oaa12ikc+DiI= 105 107 github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376/go.mod h1:an3vInlBmSxCcxctByoQdvwPiA7DTK7jaaFDBTtu0ic= 106 108 github.com/go-git/go-billy/v5 v5.5.0 h1:yEY4yhzCDuMGSv83oGxiBotRzhwhNr8VZyphhiu+mTU=

+3

gomod2nix.toml

reviewed

··· 106 106 [mod."github.com/fxamacker/cbor/v2"] 107 107 version = "v2.5.0" 108 108 hash = "sha256-2rhvuNZjeidDP+Og6Q0u4ROiaPrEOjoI5wCb17XRnOQ=" 109 109 + [mod."github.com/go-faker/faker/v4"] 110 110 + version = "v4.2.0" 111 111 + hash = "sha256-ZnafEz3GQHb7JE1YL8gXYhvHVvqxmvbPLPcVZXJwl9o=" 109 112 [mod."github.com/go-git/gcfg"] 110 113 version = "v1.5.1-0.20230307220236-3a3c6141e376" 111 114 hash = "sha256-f4k0gSYuo0/q3WOoTxl2eFaj7WZpdz29ih6CKc8Ude8="