dhui / dktest Goto Github PK

$ go mod tidy
go: <MY_PROJECT> imports
        github.com/golang-migrate/migrate/v4/database/postgres tested by
        github.com/golang-migrate/migrate/v4/database/postgres.test imports
        github.com/dhui/dktest imports
        github.com/docker/docker/pkg/jsonmessage imports
        github.com/docker/docker/pkg/term imports
        github.com/docker/docker/pkg/term/windows imports
        github.com/Sirupsen/logrus: github.com/Sirupsen/[email protected]: parsing go.mod:
        module declares its path as: github.com/sirupsen/logrus
                but was required as: github.com/Sirupsen/logrus

I believe to fix this you need to update docker/docker and make a new release, then upstream can update and fix this problem. Thanks a lot!

See GHSA-5ffw-gxpp-mxpf for security advisory details.

I've added this to my go.mod to patch my local project in the meantime:

replace github.com/containerd/containerd v1.6.1 => github.com/containerd/containerd v1.6.6

Docker v20.10.17 has a fix for CVE-2022-31030 that I'd love to pick up. Thank you!

moby/moby#43700
https://github.com/moby/moby/releases/tag/v20.10.17

Hi. Is it possible to set expose ports in options? Something like this

"ExposedPorts": {
  "9050/tcp": {}
}

https://nvd.nist.gov/vuln/detail/CVE-2021-3121

• vulnerable dependency github.com/gogo/protobuf v1.3.1
• see

  dktest/go.mod

  Line 11 in b3f28a6

  github.com/gogo/protobuf v1.3.1 // indirect

Is your feature request related to a problem? Please describe.
This repo currently depends on an old and vulnerable github.com/docker/docker version: https://www.sourceclear.com/vulnerability-database/libraries/github-com-docker-docker/GO/GO/lid-886114/versions/v0.7.3

https://github.com/dhui/dktest/blob/master/go.mod#L8

Describe the solution you'd like
Update to the non-vulnerable version (currently it is 1.13.1) by running:
go get -u github.com/docker/docker

Hi! Can you create a new release to reflect the dependency updates on master branch? Thanks a lot! 🙇‍♂️

Hi!

#13 upgraded containerd, which contained this security warning GHSA-crp2-qrr5-8pq7

Would it be possible to create a new release so that other projects like https://github.com/golang-migrate/migrate can update as well?

I'd be happy to contribute the PR to https://github.com/golang-migrate/migrate myself if needed :)

Thanks!

#30

We use dktest in our project and this issue prevents us moving to the latest docker dependency (24.0.7+incompatible)

How can I specify an image for a container that's not on docker hub? Are non-standard docker repositories supported at this time?

According to the readme, the following is marked as TO DO, which I think is related to this?

Use non-default network

Some Context: Microsoft is moving their MSSQL docker images away from docker hub and into their own repo at mcr.microsoft.com. See the "We're Moving" notice here.

We are moving to mcr.microsoft.com where you can pull SQL Server 2017 on Linux containers as well as SQL Server 2019 preview containers. SQL Server 2019 preview containers will only be available on mcr.microsoft.com. Overtime we will only publish to mcr.microsoft.com/mssql/server and eventually deprecate microsoft/mssql-server-linux.