Skip to content

Conversation

@sugus0422
Copy link

What happened?

There are 1 security vulnerabilities found in github.com/containerd/containerd v1.5.17

What did I do?

Upgrade github.com/containerd/containerd from v1.5.17 to 1.6.18 for vulnerability fix

What did you expect to happen?

Ideally, no insecure libs should be used.

How can we automate the detection of these types of issues?

By using the GitHub Actions configurations provided by murphysec, we can conduct automatic code security checks in our CI pipeline.

The specification of the pull request

PR Specification from OSCS

@nmengin
Copy link
Contributor

nmengin commented Sep 7, 2023

Hello @dack-su ,

Thanks for reaching out.

We are not affected by those CVEs because they affect pieces of code that we don't use.
The Docker CVEs are about the daemon and the API server, we are only using the client API.

For this reason, I have to decline your Pull Request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants