Skip to content

Enforce fix for CVE-2026-40109#1298

Merged
matheuscscp merged 1 commit intomainfrom
mandatory-gcr-claims
Apr 25, 2026
Merged

Enforce fix for CVE-2026-40109#1298
matheuscscp merged 1 commit intomainfrom
mandatory-gcr-claims

Conversation

@matheuscscp
Copy link
Copy Markdown
Member

@matheuscscp matheuscscp commented Apr 24, 2026

⚠️ Breaking change: GCR Receivers will now require email and audience in the referenced Secret, as explained in CVE-2026-40109.

Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
@matheuscscp matheuscscp added the bug Something isn't working label Apr 24, 2026
Copy link
Copy Markdown
Member

@stefanprodan stefanprodan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@matheuscscp matheuscscp merged commit b4f379e into main Apr 25, 2026
6 checks passed
@matheuscscp matheuscscp deleted the mandatory-gcr-claims branch April 25, 2026 08:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants