Skip to content

Commit

Permalink
Update system packages to last version in sf-operator-vuln-check
Browse files Browse the repository at this point in the history
That might avoid unnecessary errors that are related to the
system packages, which can be updated to recent version.
For example:

    Vulnerability #4: GO-2024-2824
        Malformed DNS message can cause infinite loop in net
      More info: https://pkg.go.dev/vuln/GO-2024-2824
      Standard library
        Found in: [email protected]
        Fixed in: [email protected]
        Example traces found:
          (...)

Change-Id: I3c3d20582185e494bb1c5b80c4bd4aa2cdcfa34d
  • Loading branch information
danpawlik committed Aug 14, 2024
1 parent 7d9aead commit 35873e1
Showing 1 changed file with 6 additions and 0 deletions.
6 changes: 6 additions & 0 deletions playbooks/run-golang-vuln.yaml
Original file line number Diff line number Diff line change
@@ -1,6 +1,12 @@
---
- hosts: "{{ hostname | default('controller') }}"
tasks:
- name: Update rpm packages to last version
become: true
ansible.builtin.package:
name: "*"
state: latest

- name: Add golang to PATH
ansible.builtin.copy:
dest: /etc/profile.d/golang-path.sh
Expand Down

0 comments on commit 35873e1

Please sign in to comment.