Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bump deps using ./hack/bump-deps.sh #1702

Merged
merged 1 commit into from
May 17, 2023
Merged

Conversation

imjasonh
Copy link
Collaborator

Signed-off-by: Jason Hall <jason@chainguard.dev>
@imjasonh imjasonh enabled auto-merge (squash) May 17, 2023 15:55
@codecov-commenter
Copy link

Codecov Report

Merging #1702 (fe3cee4) into main (dbecb1d) will decrease coverage by 0.05%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             main    #1702      +/-   ##
==========================================
- Coverage   72.21%   72.17%   -0.05%     
==========================================
  Files         121      121              
  Lines        9717     9717              
==========================================
- Hits         7017     7013       -4     
- Misses       2026     2028       +2     
- Partials      674      676       +2     

see 1 file with indirect coverage changes

@imjasonh imjasonh merged commit b7ad3f1 into google:main May 17, 2023
@oallauddin
Copy link

@jonjohnsonjr or @imjasonh
Do you know when the next version of crane will be released that will have these changes?
We are getting vulnerability errors in our trivy scans coming from github.com/docker/distribution.

usr/local/bin/crane (gobinary)
==============================
Total: 1 (HIGH: 1, CRITICAL: 0)
┌────────────────────────────────┬───────────────┬──────────┬─────────────────────┬───────────────┬───────────────────────────────────────────┐
│            Library             │ Vulnerability │ Severity │  Installed Version  │ Fixed Version │                   Title                   │
├────────────────────────────────┼───────────────┼──────────┼─────────────────────┼───────────────┼───────────────────────────────────────────┤
│ github.com/docker/distribution │ CVE-2023-2253 │ HIGH     │ v2.8.1+incompatible │ 2.8.2-beta.1  │ DoS from malicious API request            │
│                                │               │          │                     │               │ https://avd.aquasec.com/nvd/cve-2023-2253 │
└────────────────────────────────┴───────────────┴──────────┴─────────────────────┴───────────────┴───────────────────────────────────────────┘

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants