Skip to content
This repository has been archived by the owner on Oct 29, 2024. It is now read-only.

Fix CVEs using Docker Scout #109

Merged
merged 2 commits into from
Jun 6, 2023
Merged

Fix CVEs using Docker Scout #109

merged 2 commits into from
Jun 6, 2023

Conversation

felipecruz91
Copy link
Contributor

@felipecruz91 felipecruz91 commented Jun 6, 2023

This PR fixes all current CVEs detected in the extension by upgrading the Go dependencies:

13 vulnerabilities found in 5 packages
  UNSPECIFIED  1
  LOW          0
  MEDIUM       7
  HIGH         5
  CRITICAL     0

As a result of such an upgrade, I had to update the cli.VolumeList and cli.ContainerStop signatures due to a breaking change in the Docker Go library.

docker scout cves                             
    ✓ SBOM of image already cached, 50 packages indexed
    ✓ No vulnerable package detected

image

Signed-off-by: felipecruz91 <felipecruz91@hotmail.es>
Signed-off-by: felipecruz91 <felipecruz91@hotmail.es>
@github-actions
Copy link

github-actions bot commented Jun 6, 2023

Docker image tag(s) pushed:

docker/volumes-backup-extension:pr-109

Labels added to images:

org.opencontainers.image.title=volumes-backup-extension
org.opencontainers.image.description=Back up, clone, restore, and share Docker volumes effortlessly.
org.opencontainers.image.url=https://github.com/docker/volumes-backup-extension
org.opencontainers.image.source=https://github.com/docker/volumes-backup-extension
org.opencontainers.image.version=pr-109
org.opencontainers.image.created=2023-06-06T09:50:28.612Z
org.opencontainers.image.revision=19b8678e227b0d7a7edc60ed2f1c1d29d7f1de1a
org.opencontainers.image.licenses=Apache-2.0

Copy link
Member

@benja-M-1 benja-M-1 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great @felipecruz91 I haven't tested it but all the changes make sense to me 👍

@felipecruz91 felipecruz91 merged commit 1b7501f into main Jun 6, 2023
@felipecruz91 felipecruz91 deleted the hotfix/cves branch June 6, 2023 10:23
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants