[Snyk] Security upgrade ubuntu from latest to 22.10 #194
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-UBUNTU2204-OPENSSL-3314672 - https://snyk.io/vuln/SNYK-UBUNTU2204-OPENSSL-3314696 - https://snyk.io/vuln/SNYK-UBUNTU2204-OPENSSL-3314792 - https://snyk.io/vuln/SNYK-UBUNTU2204-SYSTEMD-3098846 - https://snyk.io/vuln/SNYK-UBUNTU2204-TAR-3261138
|
Kudos, SonarCloud Quality Gate passed!
|
infamousjoeg
added a commit
that referenced
this pull request
Aug 23, 2023
* Add aws-cli based role assumption for authn-iam (#190) * Typo in doc cybr_accounts_add (#192) * Typo in doc cybr_accounts_add Secret parameter should be -c, not -s * Update account.go * Bump golang.org/x/sys from 0.0.0-20220405052023-b1e9470b6e64 to 0.1.0 (#191) Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.0.0-20220405052023-b1e9470b6e64 to 0.1.0. - [Release notes](https://github.com/golang/sys/releases) - [Commits](https://github.com/golang/sys/commits/v0.1.0) --- updated-dependencies: - dependency-name: golang.org/x/sys dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * [Snyk] Security upgrade ubuntu from latest to 22.10 (#194) * fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-UBUNTU2204-OPENSSL-3314672 - https://snyk.io/vuln/SNYK-UBUNTU2204-OPENSSL-3314696 - https://snyk.io/vuln/SNYK-UBUNTU2204-OPENSSL-3314792 - https://snyk.io/vuln/SNYK-UBUNTU2204-SYSTEMD-3098846 - https://snyk.io/vuln/SNYK-UBUNTU2204-TAR-3261138 * Set non-root `cybr` user as default --------- Co-authored-by: snyk-bot <snyk-bot@snyk.io> * Update action versions & add Conjur fetching (#195) (#196) * Update action versions & add Conjur fetching * flip Go install to after source checkout * update go-version * go-version to version * version set to latest * add debug step * switch from authn-jwt to authn due to iat issues * Add unlock & checkin to cybr accounts (#199) * [Snyk] Security upgrade ubuntu from latest to kinetic (#197) * Update action versions & add Conjur fetching (#195) * Update action versions & add Conjur fetching * flip Go install to after source checkout * update go-version * go-version to version * version set to latest * add debug step * switch from authn-jwt to authn due to iat issues * fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-UBUNTU2204-BASH-3098342 - https://snyk.io/vuln/SNYK-UBUNTU2204-OPENSSL-5296052 - https://snyk.io/vuln/SNYK-UBUNTU2204-OPENSSL-5296082 - https://snyk.io/vuln/SNYK-UBUNTU2204-SHADOW-5425688 - https://snyk.io/vuln/SNYK-UBUNTU2204-SHADOW-5425688 --------- Co-authored-by: snyk-bot <snyk-bot@snyk.io> * Fixes #189 add support for cyberark identity authentication (#202) * Initial commit * Implement Identity check for httpjson * Update GitHub Workflows for successful tests (#200) * Update action versions & add Conjur fetching (#195) * Update action versions & add Conjur fetching * flip Go install to after source checkout * update go-version * go-version to version * version set to latest * add debug step * switch from authn-jwt to authn due to iat issues * Update README.md * Identity StartAuthentication implemented * refactored StartAuth * Began implementation of Password AdvanceAuth * Identity auth-type tested successfully * Added color to terminal * Update /docs * Updated README * Use platform discovery instead of requiring TenantID * Derive PCloud URL from Platform Discovery * Derive PCloud URL from Platform Discovery * Updated docs to remove tenant ID requirement * Fix 7 code smells * remove duplicate tests on v* branch * Only test on push * Fix go test failures * Generate new docs * Bump version to 1.0.0-release * add ReadInput function (#204) * Added SignOutSession function (#205) * Update Makefile * Add Polling of OOBPending (#206) * channel oob polling & otp input * Have otp code on same line * rm bin and add to .gitignore * Add .gitignore * Add version to binary release * Fixes #207 Add remaining scopes to cybr accounts change (#208) * Add remaining scopes to cybr accounts change * Remove VaultOnly tests & fix code smell * fixed account credentials unit tests * final unit tests fix --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Matias Siracusa <matias.siracusa@gmx.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: snyk-bot <snyk-bot@snyk.io>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.
Changes included in this PR
We recommend upgrading to
ubuntu:22.10, as this image has only 7 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.Some of the most important vulnerabilities in your base image include:
SNYK-UBUNTU2204-OPENSSL-3314672
SNYK-UBUNTU2204-OPENSSL-3314696
SNYK-UBUNTU2204-OPENSSL-3314792
SNYK-UBUNTU2204-SYSTEMD-3098846
SNYK-UBUNTU2204-TAR-3261138
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
Learn how to fix vulnerabilities with free interactive lessons:
🦉 NULL Pointer Dereference