The controller-for-k8s-sample from transnano

controller-for-k8s-sample's Issues

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

Update actions/setup-go action to v5
Update docker/setup-qemu-action action to v3
Update github/codeql-action action to v3
Update mcr.microsoft.com/vscode/devcontainers/go Docker tag to v1
🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

Detected dependencies

dockerfile

.devcontainer/Dockerfile

mcr.microsoft.com/vscode/devcontainers/go 0-1

Dockerfile

golang 1.20.5-buster

github-actions

.github/workflows/codeql-analysis.yml

actions/checkout v3

github/codeql-action v2

github/codeql-action v2

.github/workflows/container_scan.yml

homoluctus/gitrivy v3

.github/workflows/docker-publish.yml

actions/checkout v3

docker/setup-qemu-action v2

docker/setup-buildx-action v2

actions/cache v3

docker/login-action v2

docker/login-action v2

docker/build-push-action v3

.github/workflows/hadolint.yml

actions/checkout v3

.github/workflows/release.yml

actions/checkout v3

actions/setup-go v3

goreleaser/goreleaser-action v4

gomod

go.mod

go 1.13

github.com/go-logr/logr v1.2.3

github.com/onsi/ginkgo/v2 v2.7.0

github.com/onsi/gomega v1.24.2

k8s.io/apimachinery v0.26.0

k8s.io/client-go/v12 v12.0.0

sigs.k8s.io/controller-runtime v0.14.1

Check this box to trigger a request for Renovate to run again on this repository

Security Alert

2022-01-29T01:03:22.060Z �[33mWARN�[0m The root command will be removed. Please migrate to 'trivy image' command. See https://github.com/aquasecurity/trivy/discussions/1515

transnano/controller-for-k8s-sample (debian 9.13) - Trivy Report - 2022-01-29T01:03:24.474742262Z

debian
No Vulnerabilities found
gobinary
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
github.com/gogo/protobuf	CVE-2021-3121	HIGH	v1.2.2-0.20190723190241-65acae22fc9d	1.3.2	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3121 https://discuss.hashicorp.com/t/hcsec-2021-23-consul-exposed-to-denial-of-service-in-gogo-protobuf-dependency/29025 gogo/protobuf@`b03c65e` gogo/protobuf@`v1.3.1...v1.3.2` https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/r88d69555cb74a129a7bf84838073b61259b4a3830190e05a3b87994e@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/rc1e9ff22c5641d73701ba56362fb867d40ed287cca000b131dcf4a44@%3Ccommits.pulsar.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2021-3121 https://security.netapp.com/advisory/ntap-20210219-0006/
golang.org/x/crypto	CVE-2020-29652	HIGH	v0.0.0-20190820162420-60c769a6c586	v0.0.0-20201216223049-8b5274cf687f	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29652 https://go-review.googlesource.com/c/crypto/+/278852 https://groups.google.com/g/golang-announce/c/ouZIlBimOsE?pli=1 https://linux.oracle.com/cve/CVE-2020-29652.html https://linux.oracle.com/errata/ELSA-2021-1796.html https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff@%3Cnotifications.skywalking.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2020-29652
golang.org/x/text	CVE-2020-14040	HIGH	v0.3.2	0.3.3	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14040 GHSA-5rcv-m4m3-hfh7 golang/go#39491 golang/text@`23ae387` https://groups.google.com/forum/#!topic/golang-announce/bXVeAmGOqz0 https://linux.oracle.com/cve/CVE-2020-14040.html https://linux.oracle.com/errata/ELSA-2020-4694.html https://lists.fedoraproject.org/archives/list/[email protected]/message/TACQFZDPA7AUR6TRZBCX2RGRFSDYLI7O/ https://nvd.nist.gov/vuln/detail/CVE-2020-14040

Recommend Projects