dockle icon indicating copy to clipboard operation
dockle copied to clipboard

Published 20 hours ago • verified publisher icon goodwithtech

CVE Need to be fixed

Open stefyvarghese opened this issue 2 years ago • 1 comments

** Some packages version must be upgraded within the code to fix the High Vulnerability Alerts ** We are using action goodwithtech/dockle, and on scanning these Alerts on High Priority. We would Request that these necessary changes are done.

Please find the Attached screenshots.

image

image

stefyvarghese avatar Jun 24 '22 07:06 stefyvarghese

<Memo> We need to change the following dependency packages: https://github.com/goodwithtech/deckoder/blob/7ee08170ffbf793be0e6645d8a328b1928841fef/go.sum#L213-L215 https://github.com/containers/image/blob/2bb3f3e44c5cbe532a3cdbe735f78c21418f8dc2/go.sum#L287-L288

tomoyamachi avatar Jul 16 '22 07:07 tomoyamachi