search

fluent / fluentd-kubernetes-daemonset

Fluentd daemonset for Kubernetes and it Docker image
Apache License 2.0
1.26k stars 982 forks source link

Image vulnerabilities #1415

Closed martinelli-francesco closed 10 months ago

martinelli-francesco commented 1 year ago

Hello,

the released images have a lot of vulnerabilities (including critical and high ones):

trivy image fluent/fluentd-kubernetes-daemonset:v1.15-debian-elasticsearch7-1
...
Total: 221 (UNKNOWN: 0, LOW: 135, MEDIUM: 46, HIGH: 39, CRITICAL: 1)

(not reported the full detail for formatting issues)

I suppose that most of them are present in the base image that you are using. Can you update it to include all the security fixes?

martinelli-francesco commented 1 year ago

Can the Alpine image be added? From a security point of view, it is the best solution.

As an example: trivy image fluent/fluentd:v1.16.1-1.0 Total: 2 (UNKNOWN: 0, LOW: 0, MEDIUM: 2, HIGH: 0, CRITICAL: 0)

github-actions[bot] commented 11 months ago

This issue has been automatically marked as stale because it has been open 90 days with no activity. Remove stale label or comment or this issue will be closed in 30 days

github-actions[bot] commented 10 months ago

This issue was automatically closed because of stale in 30 days