Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix registry dependabot issues #1030

Closed
3 tasks done
kim-tsao opened this issue Feb 14, 2023 · 2 comments
Closed
3 tasks done

Fix registry dependabot issues #1030

kim-tsao opened this issue Feb 14, 2023 · 2 comments
Assignees
Labels
kind/epic A high level requirement that can/should be split into smaller issues

Comments

@kim-tsao
Copy link
Contributor

kim-tsao commented Feb 14, 2023

Which area/kind this issue is related to?

Issue Description

The registry issues seem to be related to the use of an old oras dependency. The risk seems low since we do not use the affected code paths and require the registry to be deployed in a trusted environment but we should make it a point to update out-of-date dependencies regardless

Target Date: 03/31/23

@kim-tsao
Copy link
Contributor Author

kim-tsao commented Mar 2, 2023

blocked by: #1036 and devfile/library#165

@kim-tsao kim-tsao removed the severity/blocker Issues that prevent developers from working label Mar 9, 2023
@kim-tsao kim-tsao added the kind/epic A high level requirement that can/should be split into smaller issues label Mar 23, 2023
@kim-tsao
Copy link
Contributor Author

track status in user stories

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/epic A high level requirement that can/should be split into smaller issues
Projects
None yet
Development

No branches or pull requests

1 participant