dependencies: forbid problematic dependencies of CDI + runtime-tools

github.com/container-orchestrated-devices/container-device-interface and
github.com/opencontainers/runtime-tools depend on some problematic packages in
code that isn't used by Kubernetes. Explicitly listing those dependencies
ensures that they do not get pulled in accidentally.
This commit is contained in:
Patrick Ohly 2022-11-09 19:42:32 +01:00
parent 99ead56b7c
commit 7b6e911502

View File

@ -9,6 +9,8 @@
"github.com/go-openapi/strfmt": "use k8s.io/kube-openapi/pkg/validation/strfmt instead",
"github.com/go-openapi/validate": "use k8s.io/kube-openapi/pkg/validation/validate instead",
"github.com/hashicorp/consul": "MPL license not in CNCF allowlist",
"github.com/hashicorp/errwrap": "MPL license not in CNCF allowlist",
"github.com/hashicorp/go-multierror": "MPL license not in CNCF allowlist",
"github.com/hashicorp/golang-lru": "MPL license not in CNCF allowlist",
"github.com/hashicorp/hcl": "MPL license not in CNCF allowlist",
"github.com/influxdata/influxdb1-client": "",
@ -17,7 +19,10 @@
"github.com/onsi/ginkgo": "Ginkgo has been migrated to V2, refer to #109111",
"github.com/spf13/viper": "refer to #102598",
"go.mongodb.org/mongo-driver": "",
"gopkg.in/fsnotify.v1": "obsolete, use github.com/fsnotify/fsnotify",
"k8s.io/klog": "we have switched to klog v2, so avoid klog v1",
"github.com/mndrix/tap-go": "unmaintained",
"github.com/xeipuuv/gojsonschema": "unmaintained",
"rsc.io/quote": "refer to #102833",
"rsc.io/sampler": "refer to #102833"
}