Skip to content

[WIP] Update dependency#1

Closed
akurinnoy wants to merge 1 commit into
mainfrom
update-dependency
Closed

[WIP] Update dependency#1
akurinnoy wants to merge 1 commit into
mainfrom
update-dependency

Conversation

@akurinnoy

Copy link
Copy Markdown
Owner

What does this PR do?

What issues does this PR fix or reference?

Is it tested? How?

PR Checklist

  • E2E tests pass (when PR is ready, comment /test v8-devworkspace-operator-e2e, v8-che-happy-path to trigger)
    • v8-devworkspace-operator-e2e: DevWorkspace e2e test
    • v8-che-happy-path: Happy path for verification integration with Che

Signed-off-by: David Kwon <dakwon@redhat.com>
Comment thread .ci/oci.Dockerfile
#

FROM registry.ci.openshift.org/openshift/release:golang-1.22
FROM registry.ci.openshift.org/openshift/release:golang-1.23

Check warning

Code scanning / Scorecard

Pinned-Dependencies

score is 2: containerImage not pinned by hash Remediation tip: pin your Docker image by updating registry.ci.openshift.org/openshift/release to registry.ci.openshift.org/openshift/release@sha256:cd5c68457b9da02df266e32f9e26d9c323d808acaadc35126c50a526051c1d89 Click Remediation section below for further remediation help
Comment thread build/Dockerfile

# https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi9/go-toolset
FROM registry.access.redhat.com/ubi9/go-toolset:9.5-1739267472 as builder
FROM registry.access.redhat.com/ubi9/go-toolset:1.23.6-1745328278 as builder

Check warning

Code scanning / Scorecard

Pinned-Dependencies

score is 2: containerImage not pinned by hash Remediation tip: pin your Docker image by updating registry.access.redhat.com/ubi9/go-toolset:1.23.6-1745328278 to registry.access.redhat.com/ubi9/go-toolset:1.23.6-1745328278@sha256:8a634d63713a073d7a1e086a322e57b148eef9620834fc8266df63d9294dff1b Click Remediation section below for further remediation help
Comment thread project-clone/Dockerfile
# Build the manager binary
# https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi9/go-toolset
FROM registry.access.redhat.com/ubi9/go-toolset:9.5-1739267472 as builder
FROM registry.access.redhat.com/ubi9/go-toolset:1.23.6-1745328278 as builder

Check warning

Code scanning / Scorecard

Pinned-Dependencies

score is 2: containerImage not pinned by hash Remediation tip: pin your Docker image by updating registry.access.redhat.com/ubi9/go-toolset:1.23.6-1745328278 to registry.access.redhat.com/ubi9/go-toolset:1.23.6-1745328278@sha256:8a634d63713a073d7a1e086a322e57b148eef9620834fc8266df63d9294dff1b Click Remediation section below for further remediation help
@akurinnoy akurinnoy force-pushed the update-dependency branch 2 times, most recently from 0210bb7 to fcee813 Compare May 6, 2025 13:29
@akurinnoy akurinnoy closed this May 6, 2025
@akurinnoy akurinnoy deleted the update-dependency branch May 6, 2025 14:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants