Skip to content

CI: Enable Dockerfile and image scanning #119

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 3 commits into
base: main
Choose a base branch
from
Open

CI: Enable Dockerfile and image scanning #119

wants to merge 3 commits into from

Conversation

huynaism
Copy link

@huynaism huynaism commented Nov 15, 2024 •
edited
Loading

Some remaining CVEs that may need to be looked at:

Package ID Severity Installed Version Fixed Version
cosmossdk.io/math GHSA-7225-m954-23v7 HIGH v1.3.0 1.4.0
github.com/cometbft/cometbft GHSA-p7mv-53f2-4cwj HIGH v0.38.7 0.38.15
github.com/cometbft/cometbft GHSA-g5xx-c4hv-9ccc MEDIUM v0.38.7 0.37.11, 0.38.12
github.com/cometbft/cometbft GHSA-hg58-rf2h-6rr7 MEDIUM v0.38.7 0.37.7, 0.38.8

@huynaism huynaism changed the title Add docker pipeline scanner & fix some initial issues CI: Enable Dockerfile and image scanning Nov 25, 2024
@filippos47
Copy link
Member

  • All the listed vulnerabilities will be resolved through @jrwbabylonlab PR
  • We also had a CVE on CORS, so we bumped the CORS version. This breaks unit tests, could somebody from @babylonlabs-io/web-service take a look?

This was referenced Nov 27, 2024
Closed
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@huynaism @filippos47