kaniko

kaniko copied to clipboard

Security Policy violation Binary Artifacts

434

_This issue was automatically created by [Allstar](https://github.com/ossf/allstar/)._ **Security Policy Violation** Project is out of compliance with Binary Artifacts policy: binaries present in source code **Rule Description** Binary Artifacts are an...

allstar-app[bot]

Release v1.9.0

4

# Release v1.9.0 **Highlights** - #2049 - #2054 - #2047 - #2066 - #2089 - #2047 - #2040 - and a number of dependency bumps **Submitter Checklist** These are the...

chuangw6

Reproducible builds broken in 1.8.0

6

**Actual behavior** Consider the Go program main.go and its corresponding Dockerfile (both listed below). Using kaniko in version 1.7.0, two subsequent reproducible builds using the command listed below result –...

NullHypothesis

kaniko fails to build Dockerfile inside kubernetes pod but can build with docker run...

3

**Actual behavior** - I have created a kaniko pod (image: gcr.io/kaniko-project/executor:v1.7.0-debug) with `/busybox/sleep infinity` command - Switched to to container shell with `kubectl exec` command - Created a Dockerfile in...

bharath-krishna

Image built with Kaniko claims to be OCI but in reality is not

10

**Actual behavior** Coming from https://github.com/containers/buildah/issues/3668 I am using kaniko to build an image based on an OCI-image. The base image has the following manifest: ( notice `mediaType: application/vnd.oci.image.layer.v1.tar+gzip` ) `>>>...

crisbal

Kaniko Cache Clear Auto

8

Hi By using the Kaniko in my GitLab to build docker using to push the docker image in Google Container Register with --cache=true --cache-ttl=8h and now I could see the...

sjkeerthi

in my GCP artifact registry, I now have /cache folder. Due to memory charges, I don't want it to hold up cache layers forever (I build a new image every...

lappazos

Bumps golang from 1.17 to 1.19.0. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependabot[bot]

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.8 to 2.1.18. Changelog Sourced from github/codeql-action's changelog. CodeQL Action Changelog [UNRELEASED] No user facing changes. 2.1.18 - 03 Aug 2022 Update default CodeQL bundle version to...

dependabot[bot]

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.24 to 1.44.70. Release notes Sourced from github.com/aws/aws-sdk-go's releases. Release v1.44.70 (2022-08-04) Service Client Updates service/chime-sdk-meetings: Updates service API and documentation service/config: Updates service API service/dms: Updates...

dependabot[bot]