search

v6d-io / v6d

vineyard (v6d): an in-memory immutable data manager. (Project under CNCF, TAG-Storage)
https://v6d.io
Apache License 2.0
818 stars 117 forks source link

Add the base image pingcap/alpine-glibc:alpine-3.14.6 for releasing vineyardd and bump up etcd to v3.5.13 #1856

Closed dashanji closed 3 months ago

dashanji commented 3 months ago

What do these changes do?

In release mode, the vineyardd image has no security issues.

$ trivy image ghcr.io/v6d-io/v6d/vineyardd:alpine-latest_x86_64        
2024-04-07T11:28:20.091+0800    INFO    Vulnerability scanning is enabled
2024-04-07T11:28:20.091+0800    INFO    Secret scanning is enabled
2024-04-07T11:28:20.091+0800    INFO    If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-04-07T11:28:20.091+0800    INFO    Please see also https://aquasecurity.github.io/trivy/v0.50/docs/scanner/secret/#recommendation for faster secret detection
2024-04-07T11:28:20.095+0800    INFO    Detected OS: alpine
2024-04-07T11:28:20.095+0800    INFO    Detecting Alpine vulnerabilities...
2024-04-07T11:28:20.097+0800    INFO    Number of language-specific files: 1
2024-04-07T11:28:20.097+0800    INFO    Detecting gobinary vulnerabilities...
2024-04-07T11:28:20.098+0800    WARN    This OS version is no longer supported by the distribution: alpine 3.14.6
2024-04-07T11:28:20.098+0800    WARN    The vulnerability detection may be insufficient because security updates are not provided

ghcr.io/v6d-io/v6d/vineyardd:alpine-latest_x86_64 (alpine 3.14.6)

Total: 0 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

Related issue number

Fixes https://github.com/v6d-io/v6d/issues/1855

sighingnow commented 3 months ago

Closing as invalid.