fix: bump Go to 1.24.13

geyslan · geyslan · commit e9c19baef806 · 2026-02-09T18:04:02.000-03:00
https://avd.aquasec.com/nvd/2025/cve-2025-68121/
diff --git a/.github/actions/build-dependencies/action.yaml b/.github/actions/build-dependencies/action.yaml
@@ -15,7 +15,7 @@ runs:
       run: |
         sudo rm -f /usr/bin/go
         sudo rm -f /usr/bin/gofmt
-        curl -L -o /tmp/golang.tar.gz https://go.dev/dl/go1.24.12.linux-amd64.tar.gz
+        curl -L -o /tmp/golang.tar.gz https://go.dev/dl/go1.24.13.linux-amd64.tar.gz
         sudo tar -C /usr/local -xzf /tmp/golang.tar.gz
         sudo ln -s /usr/local/go/bin/go /usr/bin/go
         sudo ln -s /usr/local/go/bin/gofmt /usr/bin/gofmt
diff --git a/api/go.mod b/api/go.mod
@@ -2,7 +2,7 @@ module github.com/aquasecurity/tracee/api
 
 go 1.24.0
 
-toolchain go1.24.12
+toolchain go1.24.13
 
 require (
 	github.com/stretchr/testify v1.8.4
diff --git a/builder/Dockerfile.alpine-tracee-container b/builder/Dockerfile.alpine-tracee-container
@@ -9,7 +9,7 @@ ARG FLAVOR=tracee-core
 # Version
 #
 
-ARG GO_VERSION=1.24.12
+ARG GO_VERSION=1.24.13
 
 
 #
diff --git a/builder/Dockerfile.evt-trigger-runner b/builder/Dockerfile.evt-trigger-runner
@@ -2,7 +2,7 @@
 # This container is used by 'evt stress' command to run event triggers in isolation
 
 # Stage 1: Build evt binary
-FROM golang:1.24.12-alpine@sha256:1c0e8e7dd5cd36c6f5dd50df5da93bebb66c4bb0ab055f8ad88544aa50b4179f AS builder
+FROM golang:1.24.13-alpine@sha256:8bee1901f1e530bfb4a7850aa7a479d17ae3a18beb6e09064ed54cfd245b7191 AS builder
 
 WORKDIR /tracee
 
diff --git a/builder/Dockerfile.k8s b/builder/Dockerfile.k8s
@@ -1,4 +1,4 @@
-FROM golang:1.24.12@sha256:7169c87a27d6a234797ca445f8a6ec08092d86bb40778fe3e48f41b027496c17
+FROM golang:1.24.13@sha256:d2d2bc1c84f7e60d7d2438a3836ae7d0c847f4888464e7ec9ba3a1339a1ee804
 
 RUN go install sigs.k8s.io/controller-tools/cmd/controller-gen@v0.17.0
 
diff --git a/builder/Dockerfile.protoc b/builder/Dockerfile.protoc
@@ -1,4 +1,4 @@
-FROM golang:1.24.12@sha256:7169c87a27d6a234797ca445f8a6ec08092d86bb40778fe3e48f41b027496c17
+FROM golang:1.24.13@sha256:d2d2bc1c84f7e60d7d2438a3836ae7d0c847f4888464e7ec9ba3a1339a1ee804
 
 ARG PROTOC_VERSION="29.0" # v5.29.0
 ARG PROTOC_ZIP="protoc-${PROTOC_VERSION}-linux-x86_64.zip"
diff --git a/builder/Dockerfile.ubuntu-tracee-make b/builder/Dockerfile.ubuntu-tracee-make
@@ -11,7 +11,7 @@ ARG gid=1000
 # Version
 #
 
-ARG GO_VERSION=1.24.12
+ARG GO_VERSION=1.24.13
 
 # install needed environment
 
diff --git a/cmd/traceectl/go.mod b/cmd/traceectl/go.mod
@@ -2,7 +2,7 @@ module github.com/aquasecurity/tracee/cmd/traceectl
 
 go 1.24.0
 
-toolchain go1.24.12
+toolchain go1.24.13
 
 require (
 	github.com/aquasecurity/table v1.10.0
diff --git a/common/go.mod b/common/go.mod
@@ -2,7 +2,7 @@ module github.com/aquasecurity/tracee/common
 
 go 1.24.0
 
-toolchain go1.24.12
+toolchain go1.24.13
 
 require (
 	github.com/google/go-cmp v0.7.0
diff --git a/docs/contributing/building/building.md b/docs/contributing/building/building.md
@@ -14,7 +14,7 @@
 2. Building **dependencies**
 
     1. `clang` && `llvm` (19)
-    2. `golang` (1.24.9 toolchain)
+    2. `golang` (1.24.13 toolchain)
     3. `libelf` and `libelf-dev`
        (or elfutils-libelf and elfutils-libelf-devel)
     4. `zlib1g` and `zlib1g-dev`
diff --git a/go.mod b/go.mod
@@ -2,7 +2,7 @@ module github.com/aquasecurity/tracee
 
 go 1.24.0
 
-toolchain go1.24.12
+toolchain go1.24.13
 
 require (
 	github.com/IBM/fluent-forward-go v0.3.0
diff --git a/scripts/installation/checksums/go1.24.12.linux-amd64.tar.gz.sha256 b/scripts/installation/checksums/go1.24.12.linux-amd64.tar.gz.sha256
diff --git a/scripts/installation/checksums/go1.24.12.linux-arm64.tar.gz.sha256 b/scripts/installation/checksums/go1.24.12.linux-arm64.tar.gz.sha256
diff --git a/scripts/installation/checksums/go1.24.13.linux-amd64.tar.gz.sha256 b/scripts/installation/checksums/go1.24.13.linux-amd64.tar.gz.sha256
@@ -0,0 +1 @@
+1fc94b57134d51669c72173ad5d49fd62afb0f1db9bf3f798fd98ee423f8d730
diff --git a/scripts/installation/checksums/go1.24.13.linux-arm64.tar.gz.sha256 b/scripts/installation/checksums/go1.24.13.linux-arm64.tar.gz.sha256
@@ -0,0 +1 @@
+74d97be1cc3a474129590c67ebf748a96e72d9f3a2b6fef3ed3275de591d49b3
diff --git a/scripts/installation/install-deps-alpine.sh b/scripts/installation/install-deps-alpine.sh
@@ -17,7 +17,7 @@ info "Starting Tracee dependency installation on Alpine Linux"
 #   scripts/installation/checksums/go${GOLANG_VERSION}.linux-amd64.tar.gz.sha256
 #   scripts/installation/checksums/go${GOLANG_VERSION}.linux-arm64.tar.gz.sha256
 # Get checksums from: https://go.dev/dl/ (click "Show checksum" for each file)
-GOLANG_VERSION="1.24.12"
+GOLANG_VERSION="1.24.13"
 STATICCHECK_VERSION="2025.1"
 REVIVE_VERSION="v1.7.0"
 GOIMPORTS_REVISER_VERSION="v3.8.2"
diff --git a/scripts/installation/install-deps-centos.sh b/scripts/installation/install-deps-centos.sh
@@ -18,7 +18,7 @@ info "Starting Tracee dependency installation on CentOS/RHEL"
 #   scripts/installation/checksums/go${GOLANG_VERSION}.linux-amd64.tar.gz.sha256
 #   scripts/installation/checksums/go${GOLANG_VERSION}.linux-arm64.tar.gz.sha256
 # Get checksums from: https://go.dev/dl/ (click "Show checksum" for each file)
-GOLANG_VERSION="1.24.12"
+GOLANG_VERSION="1.24.13"
 STATICCHECK_VERSION="2025.1"
 REVIVE_VERSION="v1.7.0"
 GOIMPORTS_REVISER_VERSION="v3.8.2"
diff --git a/scripts/installation/install-deps-ubuntu.sh b/scripts/installation/install-deps-ubuntu.sh
@@ -18,7 +18,7 @@ info "Starting Tracee dependency installation on Ubuntu/Debian"
 #   scripts/installation/checksums/go${GOLANG_VERSION}.linux-amd64.tar.gz.sha256
 #   scripts/installation/checksums/go${GOLANG_VERSION}.linux-arm64.tar.gz.sha256
 # Get checksums from: https://go.dev/dl/ (click "Show checksum" for each file)
-GOLANG_VERSION="1.24.12"
+GOLANG_VERSION="1.24.13"
 STATICCHECK_VERSION="2025.1"
 REVIVE_VERSION="v1.7.0"
 GOIMPORTS_REVISER_VERSION="v3.8.2"
diff --git a/types/go.mod b/types/go.mod
@@ -2,7 +2,7 @@ module github.com/aquasecurity/tracee/types
 
 go 1.24.0
 
-toolchain go1.24.12
+toolchain go1.24.13
 
 require github.com/stretchr/testify v1.10.0
 

Original file line number	Diff line number	Diff line change
`@@ -9,7 +9,7 @@ ARG FLAVOR=tracee-core`
`9`	`9`	`# Version`
`10`	`10`	`#`
`11`	`11`
`12`		`-ARG GO_VERSION=1.24.12`
	`12`	`+ARG GO_VERSION=1.24.13`
`13`	`13`
`14`	`14`
`15`	`15`	`#`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM golang:1.24.12@sha256:7169c87a27d6a234797ca445f8a6ec08092d86bb40778fe3e48f41b027496c17`
	`1`	`+FROM golang:1.24.13@sha256:d2d2bc1c84f7e60d7d2438a3836ae7d0c847f4888464e7ec9ba3a1339a1ee804`
`2`	`2`
`3`	`3`	`RUN go install sigs.k8s.io/controller-tools/cmd/[email protected]`
`4`	`4`
Original file line number	Diff line number	Diff line change
`@@ -11,7 +11,7 @@ ARG gid=1000`
`11`	`11`	`# Version`
`12`	`12`	`#`
`13`	`13`
`14`		`-ARG GO_VERSION=1.24.12`
	`14`	`+ARG GO_VERSION=1.24.13`
`15`	`15`
`16`	`16`	`# install needed environment`
`17`	`17`