Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[PMK-6032]: security fixes #3

Open
wants to merge 1 commit into
base: release-v3.3.2
Choose a base branch
from

Conversation

joey00072
Copy link

@joey00072 joey00072 commented Sep 27, 2023

security fixes
Jira: PMK-6032

~/programs/pf9/sriov-network-device-plugin release-v3.3.2 ⇡1 !2 ?2                                                                                                                                                                                  х INT Py base 02:27:40 PM
❯ trivy image docker.io/platform9/sriov-network-device-plugin:v3.3.2-pmk-1
2023-09-27T14:27:42.315+0530	INFO	Vulnerability scanning is enabled
2023-09-27T14:27:42.315+0530	INFO	Secret scanning is enabled
2023-09-27T14:27:42.315+0530	INFO	If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2023-09-27T14:27:42.315+0530	INFO	Please see also https://aquasecurity.github.io/trivy/v0.45/docs/scanner/secret/#recommendation for faster secret detection
2023-09-27T14:27:43.318+0530	INFO	Detected OS: alpine
2023-09-27T14:27:43.318+0530	INFO	Detecting Alpine vulnerabilities...
2023-09-27T14:27:43.320+0530	INFO	Number of language-specific files: 1
2023-09-27T14:27:43.320+0530	INFO	Detecting gobinary vulnerabilities...

docker.io/platform9/sriov-network-device-plugin:v3.3.2-pmk-1 (alpine 3.15.10)

Total: 0 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

old

~/programs/pf9/sriov-network-device-plugin release-v3.3.2 !2 ?2                                                                                                                                                                                     1m 6s Py base 01:59:10 PM
❯ trivy image docker.io/platform9/sriov-network-device-plugin:v3.3.2-pmk-1
2023-09-27T13:59:34.312+0530	INFO	Vulnerability scanning is enabled
2023-09-27T13:59:34.313+0530	INFO	Secret scanning is enabled
2023-09-27T13:59:34.313+0530	INFO	If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2023-09-27T13:59:34.313+0530	INFO	Please see also https://aquasecurity.github.io/trivy/v0.45/docs/scanner/secret/#recommendation for faster secret detection
2023-09-27T13:59:34.331+0530	INFO	Detected OS: alpine
2023-09-27T13:59:34.331+0530	INFO	Detecting Alpine vulnerabilities...
2023-09-27T13:59:34.333+0530	INFO	Number of language-specific files: 1
2023-09-27T13:59:34.333+0530	INFO	Detecting gobinary vulnerabilities...

docker.io/platform9/sriov-network-device-plugin:v3.3.2-pmk-1 (alpine 3.15.10)

Total: 0 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 0)


usr/bin/sriovdp (gobinary)

Total: 11 (UNKNOWN: 0, LOW: 0, MEDIUM: 3, HIGH: 8, CRITICAL: 0)

Copy link
Member

@mithilarun mithilarun left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please make sure to change the tag when it is pushed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants