[YUNIKORN-691] move to different UUID library

• Type: Bug
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Fix Version/s: 0.11
• Component/s: core - scheduler
• Labels: cve pull-request-available
• Target Version: 0.11
• Assignee: Wilfred Spiegelenburg
• Reporter: Wilfred Spiegelenburg
• Created: 03/Jun/21 02:51
• Updated: 21/Jan/22 21:48
• Resolved: 08/Jun/21 22:54

Description

The library we use github.com/satori/go.uuid has a CVE open against it and has had for a long time. Maintenance of the code is also questionable.
We should move to github.com/google/uuid v1.2.0.
That would be a simple replacement of uuid.NewV4().String() with uuid.NewString()

This latest version provides a uuid.NewString() method if we stick with an older version it would become uuid.New().String()

Issue Links

• is cloned by: YUNIKORN-699 replace the UUID library in the shim repo
• links to: GitHub Pull Request #276