-
Notifications
You must be signed in to change notification settings - Fork 8
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Snyk] Security upgrade golang from 1.17.7-alpine to 1.18.7-alpine #207
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE315-LIBRETLS-2428776 - https://snyk.io/vuln/SNYK-ALPINE315-OPENSSL-2426331 - https://snyk.io/vuln/SNYK-ALPINE315-OPENSSL-2426331 - https://snyk.io/vuln/SNYK-ALPINE315-ZLIB-2434420 - https://snyk.io/vuln/SNYK-ALPINE315-ZLIB-2976173
738e6d2
to
692681c
Compare
Pull Request Test Coverage Report for Build 3427288332
💛 - Coveralls |
Kudos, SonarCloud Quality Gate passed!
|
@@ -3,7 +3,7 @@ | |||
## | |||
## Build | |||
## | |||
FROM golang:1.17.7-alpine AS build | |||
FROM golang:1.18.7-alpine AS build |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I believe there's a 1.18.8
version now. You might want to use that one.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Test Coverage Report for Build 3427288332Warning: This coverage report may be inaccurate.This pull request's base commit is no longer the HEAD commit of its target branch. This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.
Details
💛 - Coveralls |
Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.
Changes included in this PR
We recommend upgrading to
golang:1.18.7-alpine
, as this image has only 0 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.Some of the most important vulnerabilities in your base image include:
SNYK-ALPINE315-LIBRETLS-2428776
SNYK-ALPINE315-OPENSSL-2426331
SNYK-ALPINE315-OPENSSL-2426331
SNYK-ALPINE315-ZLIB-2434420
SNYK-ALPINE315-ZLIB-2976173
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.