Open
Description
Describe the bug
We see that the latest Loki 3.4.2 is using ADAL package (github.com/azure/go-autorest/autorest/adal) which has reached its end of life.
To Reproduce
Steps to reproduce the behavior:
- Please pull the image and check the package version of the reported ADAL package version in Docker Desktop. PFA the Sbom generated of the image.
Expected behavior
Fix from the upstream: use github.com/Azure/azure-sdk-for-go/sdk/azidentity instead. PFA
Technical Impact: https://learn.microsoft.com/en-us/entra/msal/dotnet/#migration-from-azure-active-directory-authentication-library-adal
Environment:
NA
Screenshots, Promtail config, or terminal output
loki-3-4-2.json
Metadata
Metadata
Assignees
Labels
No labels