search

roboll / helmfile

Deploy Kubernetes Helm Charts
MIT License
4.05k stars 565 forks source link

Security vulnerabilities in docker images #2082

Open petrovicboban opened 2 years ago

petrovicboban commented 2 years ago

Is there any plan to work on fixing security vulnerabilities in published docker images? My organization is using XRay, which blocks images with high severity vulnerabilities, and this greatly reduces adoption of this project among companies.

petrovicboban commented 2 years ago

Here are some examples of security vulnerabilities reported by XRay, for v0.143.0, alpine image. image

image (1)

petrovicboban commented 2 years ago

It seems that those vulnerabilities are not introduced by helmfile itself, but helm plugins. I'm experimenting to find out what can be done.