Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore: Update from ubi8/go-toolset:1.21.13-1 to ubi8/go-toolset:1.22.7-5 #1348

Open
wants to merge 5 commits into
base: main
Choose a base branch
from
Open

chore: Update from ubi8/go-toolset:1.21.13-1 to ubi8/go-toolset:1.22.7-5 #1348

wants to merge 5 commits into from

Conversation

che-incubator-bot
Copy link
Collaborator

Signed-off-by: Nick Boldt nboldt@redhat.com

github-advanced-security[bot]
github-advanced-security bot found potential problems Nov 9, 2024
View reviewed changes
build/Dockerfile
@@ -14,7 +14,7 @@
#

# https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi8/go-toolset
FROM registry.access.redhat.com/ubi8/go-toolset:1.21.13-1 as builder
FROM registry.access.redhat.com/ubi8/go-toolset:1.22.7-5 as builder

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 2: containerImage not pinned by hash
Remediation tip: pin your Docker image by updating registry.access.redhat.com/ubi8/go-toolset:1.22.7-5 to registry.access.redhat.com/ubi8/go-toolset:1.22.7-5@sha256:bd2057262d0876188976f79d2246717994de9e03dd589b1e6471dd2b2777204f
Click Remediation section below for further remediation help
build/Dockerfile
@@ -34,7 +34,7 @@
RUN make compile-webhook-server

# https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi8-minimal
FROM registry.access.redhat.com/ubi8-minimal:8.10-1086
FROM registry.access.redhat.com/ubi8-minimal:8.10-1130

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 2: containerImage not pinned by hash
Remediation tip: pin your Docker image by updating registry.access.redhat.com/ubi8-minimal to registry.access.redhat.com/ubi8-minimal@sha256:c12e67af6a7e15113d76bc72f10bef2045c026c71ec8b7124c8a075458188a83
Click Remediation section below for further remediation help
project-clone/Dockerfile
@@ -15,7 +15,7 @@

# Build the manager binary
# https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi8/go-toolset
FROM registry.access.redhat.com/ubi8/go-toolset:1.21.13-1 as builder
FROM registry.access.redhat.com/ubi8/go-toolset:1.22.7-5 as builder

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 2: containerImage not pinned by hash
Remediation tip: pin your Docker image by updating registry.access.redhat.com/ubi8/go-toolset:1.22.7-5 to registry.access.redhat.com/ubi8/go-toolset:1.22.7-5@sha256:bd2057262d0876188976f79d2246717994de9e03dd589b1e6471dd2b2777204f
Click Remediation section below for further remediation help
project-clone/Dockerfile
@@ -37,7 +37,7 @@
project-clone/main.go

# https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi8-minimal
FROM registry.access.redhat.com/ubi8-minimal:8.10-1086
FROM registry.access.redhat.com/ubi8-minimal:8.10-1130

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 2: containerImage not pinned by hash
Remediation tip: pin your Docker image by updating registry.access.redhat.com/ubi8-minimal to registry.access.redhat.com/ubi8-minimal@sha256:c12e67af6a7e15113d76bc72f10bef2045c026c71ec8b7124c8a075458188a83
Click Remediation section below for further remediation help
@AObuchow
Copy link
Collaborator

/retest-required

AObuchow
AObuchow approved these changes Nov 13, 2024
View reviewed changes
Copy link
Collaborator

@AObuchow AObuchow left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I believe this unblocks #1316 🥳

@openshift-ci openshift-ci bot added the lgtm label Nov 13, 2024
@openshift-ci OpenShift CI
Copy link

openshift-ci bot commented Nov 13, 2024

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: AObuchow, che-incubator-bot

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@AObuchow AObuchow AObuchow approved these changes

@dkwon17 dkwon17 Awaiting requested review from dkwon17 dkwon17 is a code owner

@ibuziuk ibuziuk Awaiting requested review from ibuziuk ibuziuk is a code owner

Assignees

@AObuchow AObuchow

Labels
approved lgtm
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@che-incubator-bot @AObuchow @nickboldt