actions-runner-controller
actions-runner-controller copied to clipboard
Critical and High severity issue on summerwind/actions-runner-dind:latest
Describe the bug Critical and High severity issue on summerwind/actions-runner-dind:latest
To Reproduce Scan the image for security compliance
Expected behavior Image to be free of severities
Screenshots
you can pass an arg to run your own dind image which is what we do,
- patch: |-
- op: add
path: /spec/template/spec/containers/0/args/-
value: --docker-image=cr.example.com/custom-actions-runners/docker:dind
we have been using the plain upstream docker:dind images so far, they dont have as many cve's as you list, but they still have cve-2021-29923 and cve-2022-27191
If this is still an active issue can I pick it up? #1220 #1221 and #1222 can all be fixed by the same PR probably.