kaniko

kaniko copied to clipboard

Access Vulnerability in Google Container Tools

1

While working on the Google Container Tools project, I identified a critical vulnerability in [containerd]([github.com/containerd/containerd] (https://vulert.com/vuln-db/go/github-com-containerd-containerd)) package ( which dependency of Google container tool) that allows unauthorized access to the...

ankitdn

**migrated from https://github.com/GoogleContainerTools/kaniko/pull/3338 here to unblock main of my fork.** https://github.com/GoogleContainerTools/kaniko/issues/3088#issuecomment-2404594157 doesn't fix #3088 but is related to that issue **Description** Currently the `CreatedAt` timestamp (and all other metadata) is...

mzihlmann

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.31.0 to 0.35.0. Commits 7292932 ssh: limit the size of the internal packet queue while waiting for KEX f66f74b acme/autocert: check host policy before probing the cache...

dependabot[bot]

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.33.0 to 0.36.0. Commits 85d1d54 go.mod: update golang.org/x dependencies cde1dda proxy, http/httpproxy: do not mismatch IPv6 zone ids against hosts fe7f039 publicsuffix: spruce up code gen and...

dependabot[bot]

Upgrade to Artifact Registry

1

As far as I know, kaniko uses Google Container Registry to provide the official docker image. > kaniko is meant to be run as an image: gcr.io/kaniko-project/executor As Google has...

matthiaswronka

Using symlink in the RUN directive increases the image file size, but using Docker does not

1

Using symlink in the RUN directive increases the image file size, but using Docker does not ### I'm trying to build an image where the RUN command in Dockerfile uses...

remedecode

Remove binary file from the project repository

1

Fixes #2105 Security Policy Violation Project is out of compliance with Binary Artifacts policy: binaries present in source code. **Description** A binary test file was added to the repo in...

tlk

Since we only care about the current state of the repo, it doesn't make sense to pull the full commit history of a repo. It would be helpful to expose...

ashishmax31

**Actual behavior** kaniko image push with `--push-ignore-immutable-tag-errors` isn't working because it depends upon error message from AWS and aws has changed the message. Kaniko logic to catch tag immutability error...

rohit-tandon

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.0.2 to 5.5.0. Release notes Sourced from actions/setup-go's releases. v5.5.0 What's Changed Bug fixes: Update self-hosted environment validation by @​priyagupta108 in actions/setup-go#556 Add manifest validation and improve...

dependabot[bot]