From 32142cc15986b6a587044f9dc1f9953127740f25 Mon Sep 17 00:00:00 2001 From: Tullio Sebastiani Date: Fri, 20 Sep 2024 14:33:41 +0200 Subject: [PATCH] CVEs fix (#698) * golang cves fix Signed-off-by: Tullio Sebastiani fix Signed-off-by: Tullio Sebastiani * arcaflow update Signed-off-by: Tullio Sebastiani --------- Signed-off-by: Tullio Sebastiani --- containers/Dockerfile | 7 ++++--- requirements.txt | 2 +- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/containers/Dockerfile b/containers/Dockerfile index b87ae0a7..97426437 100644 --- a/containers/Dockerfile +++ b/containers/Dockerfile @@ -1,13 +1,14 @@ # oc build -FROM golang:1.22.4 AS oc-build +FROM golang:1.22.5 AS oc-build RUN apt-get update && apt-get install -y --no-install-recommends libkrb5-dev WORKDIR /tmp RUN git clone --branch release-4.18 https://github.com/openshift/oc.git WORKDIR /tmp/oc -RUN go mod edit -go 1.22.3 &&\ +RUN go mod edit -go 1.22.5 &&\ go get github.com/moby/buildkit@v0.12.5 &&\ go get github.com/containerd/containerd@v1.7.11&&\ - go get github.com/docker/docker@v25.0.5&&\ + go get github.com/docker/docker@v25.0.6&&\ + go get github.com/opencontainers/runc@v1.1.14&&\ go mod tidy && go mod vendor RUN make GO_REQUIRED_MIN_VERSION:= oc diff --git a/requirements.txt b/requirements.txt index b44f8819..6fad2670 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,7 +1,7 @@ aliyun-python-sdk-core==2.13.36 aliyun-python-sdk-ecs==4.24.25 arcaflow-plugin-sdk==0.14.0 -arcaflow==0.17.2 +arcaflow==0.19.1 boto3==1.28.61 azure-identity==1.16.1 azure-keyvault==4.2.0