update github.com/sylabs/sif/v2 for CVE-2022-39237

goodwithtech / dockle

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

https://containers.goodwith.tech/

Apache License 2.0

2.8k stars 139 forks source link

Closed pyama86 closed 2 years ago

pyama86 commented 2 years ago

refs: https://avd.aquasec.com/nvd/cve-2022-39237 Hi! thanks for provide great product!

github.com/sylabs/sif/v2 is affected CVE-2022-39237 and then I update it. thanks!

tomoyamachi commented 2 years ago

@pyama86 Thank you for your contribution!

tomoyamachi commented 2 years ago

The merged code is released as Dockle v0.4.9.