Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Is this project still active? Container Image update? #88

Closed
Matthiator opened this issue Jan 29, 2023 · 5 comments
Closed

Is this project still active? Container Image update? #88

Matthiator opened this issue Jan 29, 2023 · 5 comments

Comments

@Matthiator
Copy link

Matthiator commented Jan 29, 2023

Is this project still under maintenance?
I really like the project, however:
The image quay.io/jetstack/version-checker:v0.2.1 is now over 2 years old and has some security issues: https://trivy.dev/results/?image=quay.io/jetstack/version-checker:v0.2.1

I built a new image with alpine:3.17.1. Unfortunately, Trivy still finds some security issues regarding gobinary:

grafik

Would it be possible for someone to build an up-to-date container image without any security issues?

@davidcollom
Copy link
Collaborator

Hi @Matthiator, Thanks for bringing this to our attention. Unfortunately, version-checker hasn't been given the love and attention that it deserves.

I have all intentions of getting this project back on track however I've not had time to sit down and get things back up and running due to other commitments.

PR's are as always welcome if you have the time/experience.

@mboeren
Copy link

mboeren commented Feb 17, 2023

Would love it if this got revived. It does exactly what I'm looking for, nothing more, nothing less.

@whiskeysierra
Copy link

@davidcollom I opened a PR. Getting that in and publishing a new release would be much appreciated.

@davidcollom
Copy link
Collaborator

I've created a 0.2.2 release yesterday and in the process of getting the helm chart published to our helm repo.

@davidcollom
Copy link
Collaborator

You can now pull and use the Jetstack Helm Chart Repo to install version-checker 🎉

$ helm repo update
Hang tight while we grab the latest from your chart repositories...
...Successfully got an update from the "jetstack" chart repository
Update Complete. ⎈Happy Helming!⎈
$ helm search repo jetstack
NAME                                    CHART VERSION   APP VERSION     DESCRIPTION                                       
jetstack/cert-manager                   v1.12.2         v1.12.2         A Helm chart for cert-manager                     
jetstack/cert-manager-approver-policy   v0.7.0          v0.7.0          A Helm chart for cert-manager-approver-policy     
jetstack/cert-manager-csi-driver        v0.5.0          v0.5.0          A Helm chart for cert-manager-csi-driver          
jetstack/cert-manager-csi-driver-spiffe v0.4.0          v0.4.0          cert-manager csi-driver-spiffe is a CSI plugin ...
jetstack/cert-manager-google-cas-issuer v0.6.2          v0.6.2          A Helm chart for jetstack/google-cas-issuer       
jetstack/cert-manager-istio-csr         v0.7.0          v0.7.0          istio-csr enables the use of cert-manager for i...
jetstack/cert-manager-trust             v0.2.1          v0.2.0          DEPRECATED: The old name for trust-manager. Use...
jetstack/trust-manager                  v0.5.0          v0.5.0          trust-manager is the easiest way to manage TLS ...
jetstack/version-checker                0.2.3           v0.2.2          A Helm chart for version-checker                  

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants