observeinc · obs-gh-mattcotter · Mar 19, 2025 · Mar 18, 2025 · Mar 19, 2025 · Mar 19, 2025
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -18,6 +18,8 @@ jobs:
     name: Docker Image Vulnerability Check
     uses: ./.github/workflows/vuln-check.yaml
     secrets: inherit
+    with:
+      branch: ${{ github.ref }}
 
   goreleaser:
     needs: vuln-check

diff --git a/.github/workflows/vuln-check.yaml b/.github/workflows/vuln-check.yaml
@@ -2,7 +2,16 @@ name: Docker Image Vulnerability Check
 
 on:
   workflow_dispatch:
+    inputs:
+      branch:
+        description: "The branch on which to run the vulnerability check"
+        required: true
+        default: "main"
   workflow_call:
+    inputs:
+      branch:
+        required: true
+        type: string
 
 permissions:
   contents: read

diff --git a/go.mod b/go.mod
@@ -426,7 +426,11 @@ require (
 	sigs.k8s.io/yaml v1.4.0 // indirect
 )
 
+// TODO remove the expr-lang/expr, x/net, and x/oauth2 replacements once our dependencies are updated beyond the vulnerable versions.
 replace (
+	github.com/expr-lang/expr => github.com/expr-lang/expr v1.17.0
 	github.com/observeinc/observe-agent/components/processors/observek8sattributesprocessor v0.0.0-00010101000000-000000000000 => ./components/processors/observek8sattributesprocessor
 	github.com/observeinc/observe-agent/observecol => ./observecol
+	golang.org/x/net => golang.org/x/net v0.36.0
+	golang.org/x/oauth2 => golang.org/x/oauth2 v0.27.0
 )
diff --git a/vendor/github.com/expr-lang/expr/.gitattributes b/vendor/github.com/expr-lang/expr/.gitattributes
diff --git a/vendor/github.com/expr-lang/expr/README.md b/vendor/github.com/expr-lang/expr/README.md
diff --git a/vendor/github.com/expr-lang/expr/ast/find.go b/vendor/github.com/expr-lang/expr/ast/find.go
diff --git a/vendor/github.com/expr-lang/expr/ast/node.go b/vendor/github.com/expr-lang/expr/ast/node.go
diff --git a/vendor/github.com/expr-lang/expr/ast/print.go b/vendor/github.com/expr-lang/expr/ast/print.go
diff --git a/vendor/github.com/expr-lang/expr/ast/visitor.go b/vendor/github.com/expr-lang/expr/ast/visitor.go