From 81fe7543b457750562ab567c0dc79d7acfcb86db Mon Sep 17 00:00:00 2001 From: Cian Johnston Date: Thu, 26 Mar 2026 14:53:47 +0000 Subject: [PATCH] chore: set tls.VersionTLS12 MinVersion in cli/server.go to address gosec warning (#23646) I was investigating `//nolint` comments and this one popped up. It raised my eyebrows enough to warrant its own PR. --- cli/server.go | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/cli/server.go b/cli/server.go index 127baf7757..6acbed6b80 100644 --- a/cli/server.go +++ b/cli/server.go @@ -2327,7 +2327,8 @@ func ConfigureHTTPClient(ctx context.Context, clientCertFile, clientKeyFile stri return ctx, nil, err } - tlsClientConfig := &tls.Config{ //nolint:gosec + tlsClientConfig := &tls.Config{ + MinVersion: tls.VersionTLS12, Certificates: certificates, NextProtos: []string{"h2", "http/1.1"}, }