Markus Lehtonen
Markus Lehtonen
/remove-lifecycle stale
Implemented in #848
Implementation just needs review /remove-lifecycle stale
CVE scan lists high vulnerability against latest image k8s.gcr.io/nfd/node-feature-discovery:v0.11.1
I don't think this applicable to us. NFD binaries are statically linked golang binaries (no c compiler involved). The possible hooks run by nfd (worker) inside the image are deployed/managed...
CVE scan lists high vulnerability against latest image k8s.gcr.io/nfd/node-feature-discovery:v0.11.1
@gseidlerhpe v0.11.2 (#870) should fix this issue. Close?
I agree. There have been attempts in the past e.g. #203 and #327 at least. Now that we have K8s test-infra (gcb as the image builder) as the CI pipeline...
> @marquiz We can easily do this with github actions Yeah, sure. But we use prow for building images
> @marquiz Are there any plans to progress with this issue? > It looks like the main problem is not in updating the Makefile. This change is quite simple if...
> I am not big fan of cross compilation tho, so the question is, do we want to do it like that? With docker buildx you shouldn't need that. Just...
> I don't know how exactly that was done, but this container works without issues. I think they use docker buildx: https://github.com/raspbernetes/multi-arch-images