goodwithtech / dockle

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start
https://containers.goodwith.tech/
Apache License 2.0
2.8k stars 139 forks source link

containerd library update #173

Closed l00zak closed 2 years ago

l00zak commented 2 years ago

Description I've scanned dockle using trivy, and it complains me an high severity issue in library containerd v1.5.1 used by dockle, issue seams easy to fix by updating library to at least v1.5.7 or latest v1.6.0

image

What did you expect to happen?

What happened instead?

Output of run with -debug:

(paste your output here)

Output of dockle -v: dockle version 0.4.4

(paste your output here)

Additional details (base image name, container registry info...):

tomoyamachi commented 2 years ago

This issue has been fixed in v0.4.5.