cloud-sdk-docker

cloud-sdk-docker copied to clipboard

Bump alpine from 3.20 to 3.22 in /alpine

1

Bumps alpine from 3.20 to 3.22. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependabot[bot]

Fix build check warnings

2

Fix build check warnings. - FromAsCasing: 'as' and 'FROM' keywords' casing do not match (line 1) - LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format...

178inaba

Add Arm support for the latest docker image. Important note: `cloud-spanner-emulator` component is not supported on ARM.

anindyatahsin

Documentation claims there are `linux/arm` images

2

Images do not have `arm` architectures: https://hub.docker.com/r/google/cloud-sdk/tags?name=latest [latest](https://hub.docker.com/layers/google/cloud-sdk/latest/images/sha256-5bb7bf83b7b782c88c53e1b0500abac6b6e2a72f5171bfdfb810655cd16f6c7b) Digest | OS/ARCH | Compressed size -- | -- | -- 5bb7bf83b7b7 | linux/amd64 | 1.22 GB Last pushed 8 days by...

jsoref

Build with Alpine v3.21 to get rclone-1.68.2-r0 to fix CVE-2024-52522

1

rclone-1.66.0-r5 has a vulnerability [CVE-2024-52522](https://security.alpinelinux.org/vuln/CVE-2024-52522), which is fixed in rclone-1.68.2-r0. I use `gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine` with rclone installed, and it's being marked as vulnerable to that CVE. Unfortunately I can't upgrade rclone...

henrahmagix

Debian-based Cloud SDK images use vulnerable zlib1g library (CVE-2023-45853)

1

The Debian-based images for the Google Cloud SDK are currently using a vulnerable version of the zlib1g library (`1:1.2.13.dfsg-1`), which is affected by CVE-2023-45853. Image versions: - latest/5a77b9f8fc71 - stable/6d971c21fa2d

ksoftirqd