official container image has too many CVE

[tuananh]

is there any attempt to fix this?

recently, we tried trivy to scan this and found 22 critical + 164 high cve (total 533 CVEs)

[arikalon1]

Thanks for reporting it @tuananh We're working on patching our images

[tuananh]

may i ask how do you plan to fix that? we want to adopt Robusta at work and I would love to help anywhere I can

Btw, I sent 2 PR your way in kubewatch repo https://github.com/robusta-dev/kubewatch/pull/42 and https://github.com/robusta-dev/kubewatch/pull/43

[RoryDoherty]

FYI these are the Critical CVEs detected by trivy in the latest release 0.10.17

CVE-2019-8457
CVE-2021-29921
CVE-2021-41945
CVE-2023-23914
CVE-2023-28322

[arikalon1]

Thanks @tuananh , I just merged to kubewatch PRs @RoryDoherty , we're going to look into fixing the runner CVEs as well

[RoiGlinik]

@tuananh I know its kind of late. But our latest release 0.14.1 from 12 days ago. Resolved most of the cves. So there should very few relevant CVEs if any

[tuananh]

@RoiGlinik it's much better. Thank you for all the work <3