microcks / microcks-ansible-operator

Kubernetes Operator for easy setup and management of Microcks installs
https://microcks.io
Apache License 2.0
26 stars 6 forks source link

Improve container image vulnerability score #64

Closed lbroudoux closed 2 years ago

lbroudoux commented 2 years ago

As of today, vulnerability score of container image has been degraded due to old version of Operator SDK being used (0.16.0). See the security report from Quay.io.

Whilst upgrading to latest Operator SDK is a hard one because SDK had breaking changes when shifting to 1.0- it will involve many adjustments and we're now too late in release cycle to do that. Nevertheless, we should try to upgrade to newest version possible (0.19.4 ?) to make things better on the security side.

The starting-point situation is as follow:

Let see how we can improve!

lbroudoux commented 2 years ago

Switching to 0.19.4 improves the vulnerability score on Quay.io. See the new security report.

Here's now the situation: