platform9 / luigi

The plumber you'll hire to install all your Kubernetes network plumbing
Apache License 2.0
22 stars 3 forks source link

security fixes openvswich dhcp controller #121

Closed joey00072 closed 12 months ago

joey00072 commented 12 months ago

dhcp-controller and openvswitch security fixes

(base) ➜  ~
(base) ➜  ~ trivy image docker.io/platform9/openvswitch:v2.17.5-2
2023-11-09T19:07:26.443Z    INFO    Need to update DB
2023-11-09T19:07:26.443Z    INFO    DB Repository: ghcr.io/aquasecurity/trivy-db
2023-11-09T19:07:26.443Z    INFO    Downloading DB...
40.73 MiB / 40.73 MiB [---------------------------------------------------------------------------------------------------------------------------------------------------------] 100.00% 17.07 MiB p/s 2.6s
2023-11-09T19:07:29.607Z    INFO    Vulnerability scanning is enabled
2023-11-09T19:07:29.607Z    INFO    Secret scanning is enabled
2023-11-09T19:07:29.607Z    INFO    If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2023-11-09T19:07:29.607Z    INFO    Please see also https://aquasecurity.github.io/trivy/v0.45/docs/scanner/secret/#recommendation for faster secret detection
2023-11-09T19:07:29.628Z    INFO    Detected OS: alpine
2023-11-09T19:07:29.629Z    INFO    Detecting Alpine vulnerabilities...
2023-11-09T19:07:29.644Z    INFO    Number of language-specific files: 1
2023-11-09T19:07:29.644Z    INFO    Detecting python-pkg vulnerabilities...

docker.io/platform9/openvswitch:v2.17.5-2 (alpine 3.16.7)

Total: 0 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

(base) ➜  ~ trivy image docker.io/platform9/openvswitch:v2.17.5-2
2023-11-09T19:07:49.649Z    INFO    Vulnerability scanning is enabled
2023-11-09T19:07:49.649Z    INFO    Secret scanning is enabled
2023-11-09T19:07:49.649Z    INFO    If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2023-11-09T19:07:49.649Z    INFO    Please see also https://aquasecurity.github.io/trivy/v0.45/docs/scanner/secret/#recommendation for faster secret detection
2023-11-09T19:07:49.666Z    INFO    Detected OS: alpine
2023-11-09T19:07:49.667Z    INFO    Detecting Alpine vulnerabilities...
2023-11-09T19:07:49.681Z    INFO    Number of language-specific files: 1
2023-11-09T19:07:49.681Z    INFO    Detecting python-pkg vulnerabilities...

docker.io/platform9/openvswitch:v2.17.5-2 (alpine 3.16.7)

Total: 0 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 0)
codecov-commenter commented 12 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Comparison is base (10e8e0c) 0.00% compared to head (fc2edcd) 0.00%.

:exclamation: Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## master #121 +/- ## ====================================== Coverage 0.00% 0.00% ====================================== Files 2 2 Lines 767 767 ====================================== Misses 767 767 ``` | [Files](https://app.codecov.io/gh/platform9/luigi/pull/121?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=platform9) | Coverage Δ | | |---|---|---| | [controllers/networkplugins\_controller.go](https://app.codecov.io/gh/platform9/luigi/pull/121?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=platform9#diff-Y29udHJvbGxlcnMvbmV0d29ya3BsdWdpbnNfY29udHJvbGxlci5nbw==) | `0.00% <ø> (ø)` | |

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.