search

koei-kaji / firebase-emulator-docker

Firebase emulator inside docker
MIT License
0 stars 0 forks source link

Trivy scan failure #3

Open github-actions[bot] opened 2 years ago

github-actions[bot] commented 2 years ago

Trivy scan was failured !!!
Here's who did it: @koei-kaji.
commit hash: ff49441
actions: https://github.com/koei-kaji/firebase-emulator-docker/actions/runs/2851001979

Show Trivy Results ``` ┌────────────┬────────────────┬──────────┬───────────────────┬───────────────┬────────────────────────────────────────────────────────────┐ │ Library │ Vulnerability │ Severity │ Installed Version │ Fixed Version │ Title │ ├────────────┼────────────────┼──────────┼───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤ │ busybox │ CVE-2022-30065 │ HIGH │ 1.35.0-r13 │ 1.35.0-r15 │ busybox: A use-after-free in Busybox's awk applet leads to │ │ │ │ │ │ │ denial of service... │ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2022-30065 │ ├────────────┤ │ │ │ │ │ │ ssl_client │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ └────────────┴────────────────┴──────────┴───────────────────┴───────────────┴────────────────────────────────────────────────────────────┘ ```
koei-kaji commented 2 years ago

openjdkがbusyboxy=1.35.0-r13に依存しているから現状対応できない