chore(yj): change to go build

Author: duanhongyi

stacks/envtpl/build.sh

@@ -9,11 +9,14 @@ function build() {
   install-stack go "${GO_VERSION}" && . init-stack
   mkdir -p $GOPATH/src
 
-  curl -sSL "https://github.com/duanhongyi/envtpl/archive/refs/tags/v${STACK_VERSION}.tar.gz" | tar -xz \
+  curl -sSL "https://github.com/subfuzion/envtpl/archive/refs/tags/v${STACK_VERSION}.tar.gz" | tar -xz \
   && mv envtpl-${STACK_VERSION} $GOPATH/src/envtpl/ \
-  && cd $GOPATH/src/envtpl \
-  && export GO111MODULE=on \
-  && CGO_ENABLED=0 go build \
+  && cd $GOPATH/src/envtpl
+  # fix CVE-2022-28948
+  go get -u ./...; go mod tidy; go mod vendor
+
+  export GO111MODULE=on
+  CGO_ENABLED=0 go build \
     -ldflags "-X main.AppVersionMetadata=$(date -u +%s)" \
     -a -installsuffix cgo -o /bin/envtpl ./cmd/envtpl/.
 

stacks/yj/build.sh

@@ -8,10 +8,17 @@ function build() {
   generate-stack-path
   BIN_DIR="${DATA_DIR}"/bin
   mkdir -p "${BIN_DIR}"
-  architecture=$(dpkg --print-architecture)
-  curl -o "${BIN_DIR}"/yj \
-    -L "https://github.com/sclevine/yj/releases/download/v${STACK_VERSION}/yj-linux-$architecture"; \
-  chmod +x "${BIN_DIR}"/yj
+  install-stack go "${GO_VERSION}"
+  . init-stack
+  curl -fsSL -o tmp.tar.gz https://github.com/sclevine/yj/archive/refs/tags/v${STACK_VERSION}.tar.gz
+  tar -xvzf tmp.tar.gz
+  cd yj-${STACK_VERSION}
+  # fix CVE-2022-28948
+  go get -u ./...; go mod tidy; go mod vendor
+
+  go build -ldflags "-X main.Version=${STACK_VERSION}" -o "${BIN_DIR}"/yj
+  cd ..
+  rm -rf yj-${STACK_VERSION} tmp.tar.gz
 }
 
 # call build stack