Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Address High vulnerabilities in OVMS SNYK scan #192

Closed
4 tasks done
heyselbi opened this issue Sep 14, 2023 · 4 comments
Closed
4 tasks done

Address High vulnerabilities in OVMS SNYK scan #192

heyselbi opened this issue Sep 14, 2023 · 4 comments
Assignees

Comments

@heyselbi
Copy link

heyselbi commented Sep 14, 2023

Link to SNYK report

  • Address 4 high vulnerabilities in openvino-model-server, upstream first.
  • (highly recommended, but not required) Address 2 high vulnerabilities in [quay scan]
  • sync ovms/main with odh/main
  • cherry pick from odh/main to odh/2023.1 the security fixes

(https://quay.io/repository/opendatahub/openvino_model_server/manifest/sha256:2cbe8a48ab0bc6fe7fb76919bf33253e83a6218a9c4b486b744c3dcf30679616?tab=vulnerabilities), upstream first.

@heyselbi heyselbi changed the title Address "High" vulnerabilities in SNYK scan of modelmesh repos Address High vulnerabilities in OVMS SNYK scan Oct 31, 2023
@spolti
Copy link
Member

spolti commented Nov 10, 2023

Community: Image update: openvinotoolkit/model_server#2140

  • https://github.com/openvinotoolkit/model_server/commit/03c29f788a284f2e6eb4332c79a87b3daeb5ba22
    

I was not able to reproduce a odh build to run the Clair scan against it.
Create this PR opendatahub-io/openvino_model_server#3 hoping this would build, and push to quay, yes?

@spolti
Copy link
Member

spolti commented Nov 10, 2023

ODH merged, quay scan is green:

Screenshot 2023-11-10 at 16 26 14

@spolti spolti closed this as completed Nov 16, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: Done
Status: No status
Status: Done
Development

No branches or pull requests

2 participants