UD-1549: upgrade trivy and controller-runtime dependencies - Githubissues

undistro / zora

Zora is an open source solution that helps you achieve compliance with Kubernetes best practices recommended by industry-leading frameworks. By scanning your cluster with multiple plugins, Zora identifies potential issues, misconfigurations, and vulnerabilities.

https://getup.io/opensource/zora-oss

Apache License 2.0

269 stars 21 forks source link

UD-1549: upgrade trivy and controller-runtime dependencies #298

Closed knrc closed 1 month ago

knrc commented 1 month ago

Description

Upgrade trivy dependency to handle the CVEs, this necessitated an upgrade to controller-runtime to address incompatibility issues

Linked Issues

How has this been tested?

Build images for operator/worker, deploying to local cluster
Install zora using local images
Ensure operator runs without error
Ensure plugins run, and workers run without error (other than local images)
Ensure reports are processed and available through the dashboard
Scan operator and worker images to check these vulnerabilities are no longer present

Checklist

[X] I have labeled this PR with the relevant Type labels
[ ] I have documented my code (if applicable)
[ ] My changes are covered by tests