actions-runner-controller icon indicating copy to clipboard operation
actions-runner-controller copied to clipboard

Critical and High severity issue on summerwind/actions-runner-dind:latest

Open shettarvinay opened this issue 2 years ago • 1 comments

Describe the bug Critical and High severity issue on summerwind/actions-runner-dind:latest

To Reproduce Scan the image for security compliance

Expected behavior Image to be free of severities

Screenshots image

shettarvinay avatar Mar 15 '22 07:03 shettarvinay

you can pass an arg to run your own dind image which is what we do,

- patch: |-
    - op: add
      path: /spec/template/spec/containers/0/args/-
      value: --docker-image=cr.example.com/custom-actions-runners/docker:dind

we have been using the plain upstream docker:dind images so far, they dont have as many cve's as you list, but they still have cve-2021-29923 and cve-2022-27191

Carus11 avatar Apr 03 '22 20:04 Carus11

If this is still an active issue can I pick it up? #1220 #1221 and #1222 can all be fixed by the same PR probably.

awalvie avatar Nov 06 '23 09:11 awalvie