Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Switch to distroless/base-nossl-debian11 instead as the base image #5902

Closed
ywk253100 opened this issue Feb 22, 2023 · 0 comments · Fixed by #5939
Closed

Switch to distroless/base-nossl-debian11 instead as the base image #5902

ywk253100 opened this issue Feb 22, 2023 · 0 comments · Fixed by #5939
Assignees
Milestone

Comments

@ywk253100
Copy link
Contributor

Distroless introduces a new kind of image distroless/base-nossl-debian11 which removes the openssl related packages.
Let's use this one instead as this will reduce our effort to triage the openssl-related CVEs.

Vote on this issue!

This is an invitation to the Velero community to vote on issues, you can see the project's top voted issues listed here.
Use the "reaction smiley face" up to the right of this comment to vote.

  • 👍 for "I would like to see this bug fixed as soon as possible"
  • 👎 for "There are more important bugs to focus on right now"
@ywk253100 ywk253100 added this to the v1.11 milestone Feb 22, 2023
@ywk253100 ywk253100 self-assigned this Feb 22, 2023
ywk253100 added a commit to ywk253100/velero that referenced this issue Mar 2, 2023
… CVE triage efforts

Switch the base image to distroless/base-nossl-debian11 to reduce the CVE triage efforts

Fixes vmware-tanzu#5902

Signed-off-by: Wenkai Yin(尹文开) <yinw@vmware.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
1 participant