Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update docker-credential-* binaries in kaniko images #2531

Merged

Conversation

aaron-prindle
Copy link
Collaborator

@aaron-prindle aaron-prindle commented May 26, 2023

fixes #2251
Related: #2276

Updates:

  • docker-credential-gcr
  • docker-credential-ecr-login
    NOTE: docker-credential-acr-env has no newer updates

This reduces the set of CVEs present in the kaniko image but unfortunately these binaries still have CVEs present even in their most up to date releases

@aaron-prindle aaron-prindle marked this pull request as ready for review May 26, 2023 21:10
@aaron-prindle aaron-prindle requested review from chuangw6 and Yongxuanzhang and removed request for Yongxuanzhang May 30, 2023 17:18
Copy link
Contributor

@chuangw6 chuangw6 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you @aaron-prindle !

@aaron-prindle aaron-prindle merged commit f428310 into GoogleContainerTools:main May 30, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

docker-credential-gcr produces Username incompatible with GCR when used by other libraries
2 participants