bashbrew

bashbrew copied to clipboard

chore: Update Go to supported version

8

👋 Go 1.20 has been out of support since February, and the image no longer scans clean (especially due to CVE-2024-24790). This PR updates to Go 1.22.

hairyhenderson

chore(deps): Update Go deps with critical/high CVEs

2

Note: this depends on #100 being merged first ---- There are a number of outdated dependencies with high and critical CVEs, which trip up scanners, not to mention the potential...

hairyhenderson

Add ability to specify a custom SBOM generator

7

LaurentGoderre

Now that it's more popular it makes sense to publish this too if possible.

gdams

Along with #114, we should deprecate the config file since we mostly just use the environment variables anyway (e.g., https://github.com/docker-library/meta-scripts/blob/da908ae960aaf23ff67b1d465af0ab1b47183fd8/sources.sh#L28). Environment variables are easy enough to permanently add to things...

yosifkit

deprecate (and remove) now-unused parts of bashbrew, like "bashbrew build"

1

With `meta-scripts` now doing _all_ our builds, there's a lot of functionality in `bashbrew` that no longer needs to exist.

tianon

Note: while I see ["compliance requirements"](https://github.com/docker-library/official-images/issues/16404#issuecomment-2173733639) :eyes: in the postponed-for-now Docker Official Image inclusion request by a Loongson employee, I'm personally not affiliated with Loongson, and I'm not sure if...

xen0n