Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: security updates #274

Closed
wants to merge 3 commits into from

Conversation

mitchnielsen
Copy link

@mitchnielsen mitchnielsen commented Jul 2, 2024

Security updates, including Golang -> 1.21 and updating the net package (which was reverted in #271 for issues related to glibc, which have already been addressed in the Dockerfile changes here).

Scanning

$ docker save sloop:9f71715 -o sloop_9f71715.tar

$ ocker run --rm -v /Users/mitch/code/github.com/prefecthq/platform/main/sloop_9f71715.tar:/tmp/sloop_9f71715.tar ghcr.io/aquasecurity/trivy:0.52.2 image --input /tmp/sloop_9f71715.tar --ignore-unfixed=true --scanners=vuln --severity=HIGH,CRITICAL --no-progress
2024-07-02T17:18:09Z    INFO    Need to update DB
2024-07-02T17:18:09Z    INFO    Downloading DB...       repository="ghcr.io/aquasecurity/trivy-db:2"
2024-07-02T17:18:36Z    INFO    Vulnerability scanning is enabled
2024-07-02T17:18:36Z    INFO    Detected OS     family="debian" version="12.5"
2024-07-02T17:18:36Z    INFO    [debian] Detecting vulnerabilities...   os_version="12" pkg_num=5
2024-07-02T17:18:36Z    INFO    Number of language-specific files       num=1
2024-07-02T17:18:36Z    INFO    [gobinary] Detecting vulnerabilities...

/tmp/sloop_9f71715.tar (debian 12.5)
====================================
Total: 0 (HIGH: 0, CRITICAL: 0)

Copy link

salesforce-cla bot commented Jul 2, 2024

Thanks for the contribution! Before we can merge this, we need @mitchnielsen to sign the Salesforce Inc. Contributor License Agreement.

@mitchnielsen
Copy link
Author

Meant to open this in my fork since this repository doesn't appear to be actively maintained at the moment.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant