fix: rebuild image and add sha

[alinashklyar]

What

Why

Notes

Labels

Assign the following labels to the PR:

security - to trigger image scanning in CI build

PR Comments

Add the following comments to the PR:

/e2e - to trigger E2E build

Security Report

Note

Compared security scans:

Current image:
quay.io/codefresh/dev/cf-deploy-kubernetes:cr-34326-security@sha256:70606c95b44d481f5cb0f80b9a55c08034dff7baa4081684a7b3b630d8a1d357

Baseline:
quay.io/codefresh/cf-deploy-kubernetes:master@sha256:9ef70db22ed256e7ce3bb2af347e1bc9ea87d3d8682ab6567c7c8f3e2d4364e2

Important

Current summary is in beta mode.
Please analyze the full scan report for comprehensive details.

Fixed CVEs: 23

🟣 Critical: 2

• CVE-2025-68121 in crypto/tls@1.24.11 at /usr/local/bin/kubectl1.32
• CVE-2025-15467 in openssl@3.5.4-1~deb13u1 at unknown path

🔴 High: 4

• CVE-2025-69421 in openssl@3.5.4-1~deb13u1 at unknown path
• CVE-2025-69420 in openssl@3.5.4-1~deb13u1 at unknown path
• CVE-2025-61726 in net/url@1.24.11 at /usr/local/bin/kubectl1.32
• CVE-2025-69419 in openssl@3.5.4-1~deb13u1 at unknown path

🟠 Medium: 11

• CVE-2025-61728 in archive/zip@1.24.11 at /usr/local/bin/kubectl1.32
• CVE-2025-11187 in openssl@3.5.4-1~deb13u1 at unknown path
• CVE-2025-66199 in openssl@3.5.4-1~deb13u1 at unknown path
• CVE-2025-15468 in openssl@3.5.4-1~deb13u1 at unknown path
• CVE-2026-22795 in openssl@3.5.4-1~deb13u1 at unknown path
• CVE-2025-15469 in openssl@3.5.4-1~deb13u1 at unknown path
• CVE-2026-22796 in openssl@3.5.4-1~deb13u1 at unknown path
• CVE-2025-61730 in crypto/tls@1.24.11 at /usr/local/bin/kubectl1.32
• CVE-2025-47911 in golang.org/x/net/html@v0.38.0 at /usr/local/bin/kubectl1.32
• CVE-2025-68160 in openssl@3.5.4-1~deb13u1 at unknown path
• CVE-2025-69418 in openssl@3.5.4-1~deb13u1 at unknown path

🟡 Low: 2

• CVE-2025-7709 in sqlite3@3.46.1-7 at unknown path
• CVE-2025-14104 in util-linux@2.41-5 at unknown path

⚪️ Unimportant: 3

• CVE-2022-0563 in util-linux@2.41-5 at unknown path
• CVE-2011-3374 in apt@3.0.3 at unknown path
• CVE-2011-4116 in perl@5.40.1-6 at unknown path

⚫ Unassigned: 1

• CVE-2025-58190 in golang.org/x/net/html@v0.38.0 at /usr/local/bin/kubectl1.32

[alinashklyar]

/e2e