Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Significant number of vulnerabilities #6

Open
derskythe opened this issue Mar 27, 2023 · 1 comment · Fixed by #51, #52, #54, #57 or #59
Open

Significant number of vulnerabilities #6

derskythe opened this issue Mar 27, 2023 · 1 comment · Fixed by #51, #52, #54, #57 or #59
Assignees
@derskythe
Labels
enhancement New feature or request security Security issues
Milestone
Zero tolerance fo...

Comments

@derskythe
Copy link
Owner

When installing additional tools, some of them bring their own vulnerabilities, which is shown in the report.

https://hub.docker.com/repository/docker/derskythe/github-runner/tags?page=1&ordering=last_updated

Need to find a way, either to compile everything during the installation process to a fresh version, or to somehow reduce the number of serious vulnerabilities
@derskythe derskythe added bug Something isn't working enhancement New feature or request labels Mar 27, 2023
@derskythe derskythe self-assigned this Mar 27, 2023
@derskythe derskythe linked a pull request Apr 4, 2023 that will close this issue
[Snyk] Security upgrade ubuntu from focal to rolling #51
Merged
@derskythe
Copy link
Owner Author

Issue is still not solved

@derskythe derskythe reopened this Apr 9, 2023
This was linked to pull requests Apr 9, 2023
Create .github/workflows/snyk-security.yml #52
Merged
Update snyk-security.yml #54
Merged
Security 3 #57
Merged
Security 4 #59
Merged
@derskythe derskythe added security Security issues and removed bug Something isn't working labels Apr 9, 2023
@derskythe derskythe pinned this issue Apr 9, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@derskythe derskythe

Labels
enhancement New feature or request security Security issues
Projects
None yet
Milestone
Zero tolerance for vulnerabilities
1 participant
@derskythe