hyperadev / kani Goto Github PK

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): Pin image docker/dockerfile to a57df69
• chore(deps): update image golang to v1.22.3
• chore(deps): update image alpine to v3.20.0
• chore(deps): update module github.com/coreos/go-oidc/v3 to v3.10.0
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

• Check this box to trigger a request for Renovate to run again on this repository

When using Kani v1.1.0, Kani unexpectedly returns Unauthorized for all requests.
This is because of the error: failed to verify signature: fetching keys oidc: get keys failed Get "https://[team].cloudflareaccess.com/cdn-cgi/access/certs": x509: certificate signed by unknown authority

This error is caused by the use of the 'scratch' base image, which does not have /etc/ssl/certs/ca-certificates.crt which Go uses when making http requests.

As we only use one HTTP route, we don't need to use a library like gofiber.
Instead, we can directly use net/http or fasthttp.

This is a to-do list for kani v2.0.0.
Development on kani v2.0.0 will be conducted on the v2 branch until we are ready to release it.

kani v2.0.0:

• hypera.dev/kani/v2
• Rewrite following best practices
• Better logging
• Config
• TLS configuration
• Configurable HTTP responses
• Prometheus support
• Retrieve user identity information from Cloudflare (configurable)
• Testing
• Godoc
• Installation and usage documentation

If you have any ideas you would like to suggest, feel free to below!