hpvd

+1

this is how the summary from link above looks like: 

some details: 

before writing this issue, I had a conversation with Apache Security team, that it is no problem to contribute this as normal issue: > we'd warmly welcome .... if you'd...

@eolivelli thanks for your comment. Just opened an issue also in the repository of pulsars helm chart: https://github.com/apache/pulsar-helm-chart/issues/294

would be very interesting to see, how an updated helm chart with - latest pulsar image (2.9.3 -> 2.10.1 or even 2.11) https://github.com/apache/pulsar - latest prometheus image (2.17.2 -> 2.39.1)...

just as background info, the security scanner used by artifacthub, providing results shown above is trivy, **so all the finding should be pretty valid**. For details, see: https://artifacthub.io/docs/topics/security_report/ and trivy...

there is also an easy to use **github action for scanning with trivy** - the complete repository, - pull requests, - docker container - IaC - etc. => Maybe this...

number of vulnerabilities is still growing: Today images in Pulsars helm chart crosses the 1k: **1005 vulnerabilities (683 fixable) have been detected in this package's images**. see https://artifacthub.io/packages/helm/apache/pulsar?modal=security-report Good to...

new Helm chart v 3.0 on the base of Pulsar 2.10.2 was just released: https://github.com/apache/pulsar-helm-chart/releases/tag/pulsar-3.0.0