search

chartmuseum / helm-push

Helm plugin to push chart package to ChartMuseum
Apache License 2.0
668 stars 170 forks source link

Security scanning #185

Open nafallo opened 1 year ago

nafallo commented 1 year ago

Any chance we could get a release to fix the security issues Trivy is currently detecting?

leventyalcin commented 1 year ago

My PR #184 has been merged and that solves trivy findings. However, a new git tag is required for the release unfortunately. I hope @nerdeveloper will create a git tag. 🤞

leventyalcin commented 1 year ago

My PR #184 has been merged and that solves trivy findings. However, a new git tag is required for the release unfortunately. I hope @nerdeveloper will create a git tag. 🤞

paketb0te commented 11 months ago

I think upgrading the helm version should remove many of the findings related to conatinerd / docker (since the current helm releases already upgraded their versions of containerd / docker to fixed versions)