You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I too have come to this page because of the above.
Is the repo being maintained? Do you have alternatives now? (trying to find the KEP for this: kubernetes/kubernetes#106802)
When Trivy runs, a lot of the issues stem from Curl. Looking at the code, Curl is only used during image creation as far as I can tell. Couldn't we then just remove curl from the image? (haven't looked at all of the security details yet)
Currently the image
groundnuty/k8s-wait-for:no-root-v2.0
has several security vulnerabilities.Running the command
docker scout cves groundnuty/k8s-wait-for:no-root-v2.0
list all of these.Here is the summary at the end:
The Trivy scan for this repo has been failing for some time too:
https://github.com/groundnuty/k8s-wait-for/actions/workflows/trivy.yml 💥
I have not looked into this in depth, but maybe the older image of alpine is a part of this?
FROM alpine:3.16.2
The text was updated successfully, but these errors were encountered: