From beb9f63031b750b87ad78d69bd72d16eeafa8358 Mon Sep 17 00:00:00 2001 From: Vasil Sudakou Date: Wed, 17 Dec 2025 18:31:49 +0300 Subject: [PATCH 1/2] fix: security fixes for enrichment images (CVE-2025-64756, CVE-2025-65945, CVE-2025-66031, CVE-2025-12816, CVE-2025-8291, CVE-2025-6075, CVE-2025-12084) --- charts/gitops-runtime/values.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/charts/gitops-runtime/values.yaml b/charts/gitops-runtime/values.yaml index 22ff23e9..3bb1fddd 100644 --- a/charts/gitops-runtime/values.yaml +++ b/charts/gitops-runtime/values.yaml @@ -482,17 +482,17 @@ app-proxy: reportImage: registry: quay.io repository: codefreshplugins/argo-hub-codefresh-csdp-report-image-info - tag: 1.1.17-main + tag: 1.1.19-main # Git enrichment task image gitEnrichment: registry: quay.io repository: codefreshplugins/argo-hub-codefresh-csdp-image-enricher-git-info - tag: 1.1.17-main + tag: 1.1.19-main # Jira enrichment task image jiraEnrichment: registry: quay.io repository: codefreshplugins/argo-hub-codefresh-csdp-image-enricher-jira-info - tag: 1.1.17-main + tag: 1.1.19-main image: repository: quay.io/codefresh/cap-app-proxy tag: 1.3982.0 From 1bddf378212cd498ddac2cf64a7b25ace35efde0 Mon Sep 17 00:00:00 2001 From: Vasil Sudakou Date: Thu, 18 Dec 2025 15:50:59 +0300 Subject: [PATCH 2/2] fix: security vulnerability CVE-2025-64756 --- charts/gitops-runtime/values.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/charts/gitops-runtime/values.yaml b/charts/gitops-runtime/values.yaml index 3bb1fddd..502f0793 100644 --- a/charts/gitops-runtime/values.yaml +++ b/charts/gitops-runtime/values.yaml @@ -482,17 +482,17 @@ app-proxy: reportImage: registry: quay.io repository: codefreshplugins/argo-hub-codefresh-csdp-report-image-info - tag: 1.1.19-main + tag: 1.1.20-main # Git enrichment task image gitEnrichment: registry: quay.io repository: codefreshplugins/argo-hub-codefresh-csdp-image-enricher-git-info - tag: 1.1.19-main + tag: 1.1.20-main # Jira enrichment task image jiraEnrichment: registry: quay.io repository: codefreshplugins/argo-hub-codefresh-csdp-image-enricher-jira-info - tag: 1.1.19-main + tag: 1.1.20-main image: repository: quay.io/codefresh/cap-app-proxy tag: 1.3982.0