Granted Containers - Supported by fwd:cloudsec?

[j0nathontayl0r]

Hi all,

Will the Granted Firefox container repo be getting pulled into the fwd:cloudsec GitHub org?

The Granted Firefox container repo has had no commits in >3 years sending a strong signal it's been abandoned. There's a handful of CVEs within the repo but in a meaningful sense, I don't believe any of them are a significant risk. Even a low risk is overstated IMO but actively development of the repo is warranted, considering it's a tool utilised by Platform Engineers/SREs/DevOps and are high value targets.

And with the dissolution of Common Fate, the adoption of that repo into fwd:cloudsecs GitHub org and some active development from the community sends enough of a significant signal that it has been adopted along with the CLI and isn't abandoned.

[chrnorm]

Thanks for raising this. The repo has now been transferred to the fwdcloudsec org: https://github.com/fwdcloudsec/granted-containers.

Agreed the CVEs seem low risk however I've raised a PR to bump the dependencies and resolve them: fwdcloudsec/granted-containers#32. After this is merged we'll release a patch release to the Firefox addon marketplace.

[j0nathontayl0r]

Thanks @chrnorm <3