Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 23, 2024

This PR contains the following updates:

Package Type Update Change
actions/checkout action patch v4.2.1 -> v4.2.2

Release Notes

actions/checkout (actions/checkout)

v4.2.2

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from lotyp as a code owner October 23, 2024 15:11
@renovate renovate bot enabled auto-merge (rebase) October 23, 2024 15:11
@github-actions github-actions bot added the type: maintenance For maintenance, refactor and testing (perf, chore, style, revert, refactor, test, build, ci) label Oct 23, 2024
@github-actions
Copy link

github-actions bot commented Oct 23, 2024

Outdated

🔍 Vulnerabilities of ubuntu:20.04

📦 Image Reference ubuntu:20.04
digestsha256:6013ae1a63c2ee58a8949f03c6366a3ef6a2f386a7db27d86de2de965e9f450b
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
size32 MB
packages127

8 similar comments
@github-actions
Copy link

github-actions bot commented Oct 23, 2024

Outdated

🔍 Vulnerabilities of ubuntu:20.04

📦 Image Reference ubuntu:20.04
digestsha256:6013ae1a63c2ee58a8949f03c6366a3ef6a2f386a7db27d86de2de965e9f450b
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
size32 MB
packages127

@github-actions
Copy link

github-actions bot commented Oct 23, 2024

Outdated

🔍 Vulnerabilities of ubuntu:20.04

📦 Image Reference ubuntu:20.04
digestsha256:6013ae1a63c2ee58a8949f03c6366a3ef6a2f386a7db27d86de2de965e9f450b
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
size32 MB
packages127

@github-actions
Copy link

github-actions bot commented Oct 23, 2024

Outdated

🔍 Vulnerabilities of ubuntu:20.04

📦 Image Reference ubuntu:20.04
digestsha256:6013ae1a63c2ee58a8949f03c6366a3ef6a2f386a7db27d86de2de965e9f450b
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
size32 MB
packages127

@github-actions
Copy link

github-actions bot commented Oct 23, 2024

Outdated

🔍 Vulnerabilities of ubuntu:20.04

📦 Image Reference ubuntu:20.04
digestsha256:6013ae1a63c2ee58a8949f03c6366a3ef6a2f386a7db27d86de2de965e9f450b
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
size32 MB
packages127

@github-actions
Copy link

github-actions bot commented Oct 23, 2024

Outdated

🔍 Vulnerabilities of ubuntu:20.04

📦 Image Reference ubuntu:20.04
digestsha256:6013ae1a63c2ee58a8949f03c6366a3ef6a2f386a7db27d86de2de965e9f450b
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
size32 MB
packages127

@github-actions
Copy link

github-actions bot commented Oct 23, 2024

Outdated

🔍 Vulnerabilities of ubuntu:20.04

📦 Image Reference ubuntu:20.04
digestsha256:6013ae1a63c2ee58a8949f03c6366a3ef6a2f386a7db27d86de2de965e9f450b
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
size32 MB
packages127

@github-actions
Copy link

github-actions bot commented Oct 23, 2024

Outdated

🔍 Vulnerabilities of ubuntu:20.04

📦 Image Reference ubuntu:20.04
digestsha256:6013ae1a63c2ee58a8949f03c6366a3ef6a2f386a7db27d86de2de965e9f450b
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
size32 MB
packages127

@github-actions
Copy link

github-actions bot commented Oct 23, 2024

Outdated

🔍 Vulnerabilities of ubuntu:20.04

📦 Image Reference ubuntu:20.04
digestsha256:6013ae1a63c2ee58a8949f03c6366a3ef6a2f386a7db27d86de2de965e9f450b
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
size32 MB
packages127

@renovate renovate bot force-pushed the renovate/actions-checkout-4.x branch from b7b2b6f to a039a11 Compare November 13, 2024 15:07
@github-actions
Copy link

github-actions bot commented Nov 13, 2024

Outdated

🔍 Vulnerabilities of wayofdev/php-dev:latest

📦 Image Reference wayofdev/php-dev:latest
digestsha256:c3688f312cf0fcec8f2cd64fb2d7f58e42e309a5e1290511ddc2df1774093bb9
vulnerabilitiescritical: 0 high: 4 medium: 0 low: 0
size125 MB
packages247
📦 Base Image php:8.1-alpine
also known as
  • 8.1-alpine3.20
  • 8.1-cli-alpine
  • 8.1-cli-alpine3.20
  • 8.1.29-alpine
  • 8.1.29-alpine3.20
  • 8.1.29-cli-alpine
  • 8.1.29-cli-alpine3.20
digestsha256:4001f8453a837283a053931e0d085366d36f77fd5a2a18c31950c4121cd4a5ec
vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
critical: 0 high: 3 medium: 0 low: 0 stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

high : CVE--2024--34158

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

high : CVE--2024--34156

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

high : CVE--2022--30635

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.19%
EPSS Percentile57th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

critical: 0 high: 1 medium: 0 low: 0 postgresql16 16.3-r0 (apk)

pkg:apk/alpine/postgresql16@16.3-r0?os_name=alpine&os_version=3.20

high : CVE--2024--7348

Affected range<16.4-r0
Fixed version16.4-r0
EPSS Score0.05%
EPSS Percentile20th percentile
Description

@github-actions
Copy link

github-actions bot commented Nov 13, 2024

Outdated

Recommended fixes for image wayofdev/php-dev:latest

Base image is php:8.1-alpine

Name8.1.29-alpine3.20
Digestsha256:4001f8453a837283a053931e0d085366d36f77fd5a2a18c31950c4121cd4a5ec
Vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
Pushed2 months ago
Size35 MB
Packages50
Flavoralpine
OS3.20
Runtime8.1.29
The base image is also available under the supported tag(s): 8.1-alpine3.20, 8.1-cli-alpine, 8.1-cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.
TagDetailsPushedVulnerabilities
8.1-alpine
Newer image for same tag
Also known as:
  • 8.1.30-cli-alpine
  • 8.1.30-cli-alpine3.20
  • 8.1-cli-alpine
  • 8.1-cli-alpine3.20
  • 8.1.30-alpine
  • 8.1.30-alpine3.20
  • 8.1-alpine3.20
Benefits:
  • Patch runtime version update
  • Same OS detected
  • Newer image for same tag
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.1-alpine was pulled 5.2K times last month
Image details:
  • Size: 38 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.1.30
1 month ago



Change base image

TagDetailsPushedVulnerabilities
8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.13-cli-alpine
  • 8.3.13-cli-alpine3.20
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.20
  • 8-cli-alpine
  • 8-cli-alpine3.20
  • cli-alpine
  • cli-alpine3.20
  • alpine
  • alpine3.20
  • 8.3.13-alpine
  • 8.3.13-alpine3.20
  • 8.3-alpine3.20
  • 8-alpine
  • 8-alpine3.20
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
Image details:
  • Size: 39 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.3.13
2 weeks ago



8.2-alpine
Minor runtime version update
Also known as:
  • 8.2.25-cli-alpine
  • 8.2.25-cli-alpine3.20
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.20
  • 8.2.25-alpine
  • 8.2.25-alpine3.20
  • 8.2-alpine3.20
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.2-alpine was pulled 1.8K times last month
Image details:
  • Size: 38 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.2.25
2 weeks ago



@github-actions
Copy link

github-actions bot commented Nov 13, 2024

Outdated

🔍 Vulnerabilities of wayofdev/php-dev:latest

📦 Image Reference wayofdev/php-dev:latest
digestsha256:0d582e0c1fb06eab91f1e1afe0a678e11a56abd706f88dc2f2ad1e88c52f894b
vulnerabilitiescritical: 0 high: 4 medium: 0 low: 0
size107 MB
packages229
📦 Base Image php:8.1-alpine
also known as
  • 8.1-alpine3.20
  • 8.1-cli-alpine
  • 8.1-cli-alpine3.20
  • 8.1.29-alpine
  • 8.1.29-alpine3.20
  • 8.1.29-cli-alpine
  • 8.1.29-cli-alpine3.20
digestsha256:4001f8453a837283a053931e0d085366d36f77fd5a2a18c31950c4121cd4a5ec
vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
critical: 0 high: 3 medium: 0 low: 0 stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

high : CVE--2024--34158

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

high : CVE--2024--34156

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

high : CVE--2022--30635

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.19%
EPSS Percentile57th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

critical: 0 high: 1 medium: 0 low: 0 postgresql16 16.3-r0 (apk)

pkg:apk/alpine/postgresql16@16.3-r0?os_name=alpine&os_version=3.20

high : CVE--2024--7348

Affected range<16.4-r0
Fixed version16.4-r0
EPSS Score0.05%
EPSS Percentile20th percentile
Description

@github-actions
Copy link

github-actions bot commented Nov 13, 2024

Outdated

Recommended fixes for image wayofdev/php-dev:latest

Base image is php:8.1-alpine

Name8.1.29-alpine3.20
Digestsha256:4001f8453a837283a053931e0d085366d36f77fd5a2a18c31950c4121cd4a5ec
Vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
Pushed2 months ago
Size35 MB
Packages50
Flavoralpine
OS3.20
Runtime8.1.29
The base image is also available under the supported tag(s): 8.1-alpine3.20, 8.1-cli-alpine, 8.1-cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.
TagDetailsPushedVulnerabilities
8.1-alpine
Newer image for same tag
Also known as:
  • 8.1.30-cli-alpine
  • 8.1.30-cli-alpine3.20
  • 8.1-cli-alpine
  • 8.1-cli-alpine3.20
  • 8.1.30-alpine
  • 8.1.30-alpine3.20
  • 8.1-alpine3.20
Benefits:
  • Patch runtime version update
  • Same OS detected
  • Newer image for same tag
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.1-alpine was pulled 5.2K times last month
Image details:
  • Size: 38 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.1.30
1 month ago



Change base image

TagDetailsPushedVulnerabilities
8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.13-cli-alpine
  • 8.3.13-cli-alpine3.20
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.20
  • 8-cli-alpine
  • 8-cli-alpine3.20
  • cli-alpine
  • cli-alpine3.20
  • alpine
  • alpine3.20
  • 8.3.13-alpine
  • 8.3.13-alpine3.20
  • 8.3-alpine3.20
  • 8-alpine
  • 8-alpine3.20
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
Image details:
  • Size: 39 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.3.13
2 weeks ago



8.2-alpine
Minor runtime version update
Also known as:
  • 8.2.25-cli-alpine
  • 8.2.25-cli-alpine3.20
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.20
  • 8.2.25-alpine
  • 8.2.25-alpine3.20
  • 8.2-alpine3.20
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.2-alpine was pulled 1.8K times last month
Image details:
  • Size: 38 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.2.25
2 weeks ago



@github-actions
Copy link

github-actions bot commented Nov 13, 2024

Outdated

🔍 Vulnerabilities of wayofdev/php-dev:latest

📦 Image Reference wayofdev/php-dev:latest
digestsha256:124678780c7149e0b0a07aff35d13050f7cad8e4ab3ec9d44a2663f95566210f
vulnerabilitiescritical: 0 high: 4 medium: 0 low: 0
size127 MB
packages247
📦 Base Image php:8-alpine
also known as
  • 8-alpine3.20
  • 8-cli-alpine
  • 8-cli-alpine3.20
  • 8.3-alpine
  • 8.3-alpine3.20
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.20
  • 8.3.11-alpine
  • 8.3.11-alpine3.20
  • 8.3.11-cli-alpine
  • 8.3.11-cli-alpine3.20
  • alpine
  • alpine3.20
  • cli-alpine
  • cli-alpine3.20
digestsha256:fbd89ae244b08e08eece68310e23f0eb7865496203892ce649781d5d716e544f
vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
critical: 0 high: 3 medium: 0 low: 0 stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

high : CVE--2024--34158

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

high : CVE--2024--34156

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

high : CVE--2022--30635

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.19%
EPSS Percentile57th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

critical: 0 high: 1 medium: 0 low: 0 postgresql16 16.3-r0 (apk)

pkg:apk/alpine/postgresql16@16.3-r0?os_name=alpine&os_version=3.20

high : CVE--2024--7348

Affected range<16.4-r0
Fixed version16.4-r0
EPSS Score0.05%
EPSS Percentile20th percentile
Description

@github-actions
Copy link

github-actions bot commented Nov 13, 2024

Outdated

🔍 Vulnerabilities of wayofdev/php-dev:latest

📦 Image Reference wayofdev/php-dev:latest
digestsha256:0cab5d606f5b007175ca08d3d0805ef66bba80853f1368c84f309438ceeba4b9
vulnerabilitiescritical: 0 high: 4 medium: 0 low: 0
size126 MB
packages247
📦 Base Image php:8.2-alpine
also known as
  • 8.2-alpine3.20
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.20
  • 8.2.23-alpine
  • 8.2.23-alpine3.20
  • 8.2.23-cli-alpine
  • 8.2.23-cli-alpine3.20
digestsha256:664c504580bbf49e465ef58c3a501ea48c21fbfbef991f34bee822a670fbad49
vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
critical: 0 high: 3 medium: 0 low: 0 stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

high : CVE--2024--34158

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

high : CVE--2024--34156

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

high : CVE--2022--30635

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.19%
EPSS Percentile57th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

critical: 0 high: 1 medium: 0 low: 0 postgresql16 16.3-r0 (apk)

pkg:apk/alpine/postgresql16@16.3-r0?os_name=alpine&os_version=3.20

high : CVE--2024--7348

Affected range<16.4-r0
Fixed version16.4-r0
EPSS Score0.05%
EPSS Percentile20th percentile
Description

@github-actions
Copy link

github-actions bot commented Nov 13, 2024

Outdated

Recommended fixes for image wayofdev/php-dev:latest

Base image is php:8.2-alpine

Name8.2.23-alpine3.20
Digestsha256:664c504580bbf49e465ef58c3a501ea48c21fbfbef991f34bee822a670fbad49
Vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
Pushed2 months ago
Size36 MB
Packages50
Flavoralpine
OS3.20
Runtime8.2.23
The base image is also available under the supported tag(s): 8.2-alpine3.20, 8.2-cli-alpine, 8.2-cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.
TagDetailsPushedVulnerabilities
8.2-alpine
Newer image for same tag
Also known as:
  • 8.2.25-cli-alpine
  • 8.2.25-cli-alpine3.20
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.20
  • 8.2.25-alpine
  • 8.2.25-alpine3.20
  • 8.2-alpine3.20
Benefits:
  • Patch runtime version update
  • Same OS detected
  • Newer image for same tag
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.2-alpine was pulled 1.8K times last month
Image details:
  • Size: 38 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.2.25
2 weeks ago



Change base image

TagDetailsPushedVulnerabilities
8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.13-cli-alpine
  • 8.3.13-cli-alpine3.20
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.20
  • 8-cli-alpine
  • 8-cli-alpine3.20
  • cli-alpine
  • cli-alpine3.20
  • alpine
  • alpine3.20
  • 8.3.13-alpine
  • 8.3.13-alpine3.20
  • 8.3-alpine3.20
  • 8-alpine
  • 8-alpine3.20
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
Image details:
  • Size: 39 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.3.13
2 weeks ago



@github-actions
Copy link

github-actions bot commented Nov 13, 2024

Outdated

Recommended fixes for image wayofdev/php-dev:latest

Base image is php:8-alpine

Name8.3.11-alpine3.20
Digestsha256:fbd89ae244b08e08eece68310e23f0eb7865496203892ce649781d5d716e544f
Vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
Pushed2 months ago
Size37 MB
Packages50
Flavoralpine
OS3.20
Runtime8.3.11
The base image is also available under the supported tag(s): 8-alpine3.20, 8-cli-alpine, 8-cli-alpine3.20, 8.3-alpine, 8.3-alpine3.20, 8.3-cli-alpine, 8.3-cli-alpine3.20, alpine, alpine3.20, cli-alpine, cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.
TagDetailsPushedVulnerabilities
8-alpine
Newer image for same tag
Also known as:
  • 8.3.13-cli-alpine
  • 8.3.13-cli-alpine3.20
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.20
  • 8-cli-alpine
  • 8-cli-alpine3.20
  • cli-alpine
  • cli-alpine3.20
  • alpine
  • alpine3.20
  • 8.3.13-alpine
  • 8.3.13-alpine3.20
  • 8.3-alpine
  • 8.3-alpine3.20
  • 8-alpine3.20
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Newer image for same tag
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8-alpine was pulled 1.6K times last month
Image details:
  • Size: 39 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.3.13
2 weeks ago



Change base image

✅ There are no tag recommendations at this time.

@github-actions
Copy link

github-actions bot commented Nov 13, 2024

Outdated

🔍 Vulnerabilities of wayofdev/php-dev:latest

📦 Image Reference wayofdev/php-dev:latest
digestsha256:85b9c945c287ba536594f1684f30e3aeacbfcf652b09e3246fb88434cb459f1b
vulnerabilitiescritical: 0 high: 4 medium: 0 low: 0
size102 MB
packages230
📦 Base Image php:8.2-fpm-alpine
also known as
  • 8.2-fpm-alpine3.20
  • 8.2.23-fpm-alpine
  • 8.2.23-fpm-alpine3.20
digestsha256:2541389406d2ec619088fde1c8a3a1c9f3a263ee3ff3a2724e17cd78b168c89d
vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
critical: 0 high: 3 medium: 0 low: 0 stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

high : CVE--2024--34158

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

high : CVE--2024--34156

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

high : CVE--2022--30635

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.19%
EPSS Percentile57th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

critical: 0 high: 1 medium: 0 low: 0 postgresql16 16.3-r0 (apk)

pkg:apk/alpine/postgresql16@16.3-r0?os_name=alpine&os_version=3.20

high : CVE--2024--7348

Affected range<16.4-r0
Fixed version16.4-r0
EPSS Score0.05%
EPSS Percentile20th percentile
Description

@github-actions
Copy link

github-actions bot commented Nov 13, 2024

Outdated

Recommended fixes for image wayofdev/php-dev:latest

Base image is php:8.2-fpm-alpine

Name8.2.23-fpm-alpine3.20
Digestsha256:2541389406d2ec619088fde1c8a3a1c9f3a263ee3ff3a2724e17cd78b168c89d
Vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
Pushed2 months ago
Size32 MB
Packages51
Flavoralpine
OS3.20
Runtime8.2.23
The base image is also available under the supported tag(s): 8.2-fpm-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.
TagDetailsPushedVulnerabilities
8.2-fpm-alpine
Newer image for same tag
Also known as:
  • 8.2.25-fpm-alpine
  • 8.2.25-fpm-alpine3.20
  • 8.2-fpm-alpine3.20
Benefits:
  • Patch runtime version update
  • Same OS detected
  • Newer image for same tag
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.2-fpm-alpine was pulled 4.1K times last month
Image details:
  • Size: 34 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.2.25
2 weeks ago



Change base image

TagDetailsPushedVulnerabilities
8.3-fpm-alpine
Image introduces no new vulnerability but removes 3
Also known as:
  • 8.3.13-fpm-alpine
  • 8.3.13-fpm-alpine3.20
  • 8.3-fpm-alpine3.20
  • 8-fpm-alpine
  • 8-fpm-alpine3.20
  • fpm-alpine
  • fpm-alpine3.20
Benefits:
  • Same OS detected
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
Image details:
  • Size: 35 MB
  • Flavor: alpine
  • OS: 3.20
2 weeks ago



@github-actions
Copy link

github-actions bot commented Nov 13, 2024

Outdated

🔍 Vulnerabilities of wayofdev/php-dev:latest

📦 Image Reference wayofdev/php-dev:latest
digestsha256:3d77305e66823f9301243e024db481cdb1f23dcdaf996c043bb73e9450f25d97
vulnerabilitiescritical: 0 high: 4 medium: 0 low: 0
size107 MB
packages229
📦 Base Image php:8.2-alpine
also known as
  • 8.2-alpine3.20
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.20
  • 8.2.23-alpine
  • 8.2.23-alpine3.20
  • 8.2.23-cli-alpine
  • 8.2.23-cli-alpine3.20
digestsha256:664c504580bbf49e465ef58c3a501ea48c21fbfbef991f34bee822a670fbad49
vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
critical: 0 high: 3 medium: 0 low: 0 stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

high : CVE--2024--34158

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

high : CVE--2024--34156

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

high : CVE--2022--30635

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.19%
EPSS Percentile57th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

critical: 0 high: 1 medium: 0 low: 0 postgresql16 16.3-r0 (apk)

pkg:apk/alpine/postgresql16@16.3-r0?os_name=alpine&os_version=3.20

high : CVE--2024--7348

Affected range<16.4-r0
Fixed version16.4-r0
EPSS Score0.05%
EPSS Percentile20th percentile
Description

@github-actions
Copy link

github-actions bot commented Nov 13, 2024

Outdated

🔍 Vulnerabilities of wayofdev/php-dev:latest

📦 Image Reference wayofdev/php-dev:latest
digestsha256:cc08afd53c0855e18380cbded482081b1993c026c9c56b3ae5a75600e8abd461
vulnerabilitiescritical: 0 high: 4 medium: 0 low: 0
size108 MB
packages229
📦 Base Image php:8-alpine
also known as
  • 8-alpine3.20
  • 8-cli-alpine
  • 8-cli-alpine3.20
  • 8.3-alpine
  • 8.3-alpine3.20
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.20
  • 8.3.11-alpine
  • 8.3.11-alpine3.20
  • 8.3.11-cli-alpine
  • 8.3.11-cli-alpine3.20
  • alpine
  • alpine3.20
  • cli-alpine
  • cli-alpine3.20
digestsha256:fbd89ae244b08e08eece68310e23f0eb7865496203892ce649781d5d716e544f
vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
critical: 0 high: 3 medium: 0 low: 0 stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

high : CVE--2024--34158

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

high : CVE--2024--34156

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

high : CVE--2022--30635

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.19%
EPSS Percentile57th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

critical: 0 high: 1 medium: 0 low: 0 postgresql16 16.3-r0 (apk)

pkg:apk/alpine/postgresql16@16.3-r0?os_name=alpine&os_version=3.20

high : CVE--2024--7348

Affected range<16.4-r0
Fixed version16.4-r0
EPSS Score0.05%
EPSS Percentile20th percentile
Description

@github-actions
Copy link

🔍 Vulnerabilities of wayofdev/php-dev:latest

📦 Image Reference wayofdev/php-dev:latest
digestsha256:9710acc11c040abb3e5fe275a17f18c27baade576015f311197de2d85266e45d
vulnerabilitiescritical: 0 high: 4 medium: 0 low: 0
size102 MB
packages230
📦 Base Image php:8.1-fpm-alpine
also known as
  • 8.1-fpm-alpine3.20
  • 8.1.29-fpm-alpine
  • 8.1.29-fpm-alpine3.20
digestsha256:c2a4daca3f96f06a5b3fa60bf58d933e147e43b607b87dffdd31f0e430843848
vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
critical: 0 high: 3 medium: 0 low: 0 stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

high : CVE--2024--34158

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

high : CVE--2024--34156

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

high : CVE--2022--30635

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.19%
EPSS Percentile57th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

critical: 0 high: 1 medium: 0 low: 0 postgresql16 16.3-r0 (apk)

pkg:apk/alpine/postgresql16@16.3-r0?os_name=alpine&os_version=3.20

high : CVE--2024--7348

Affected range<16.4-r0
Fixed version16.4-r0
EPSS Score0.05%
EPSS Percentile20th percentile
Description

@github-actions
Copy link

github-actions bot commented Nov 13, 2024

Outdated

Recommended fixes for image wayofdev/php-dev:latest

Base image is php:8-alpine

Name8.3.11-alpine3.20
Digestsha256:fbd89ae244b08e08eece68310e23f0eb7865496203892ce649781d5d716e544f
Vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
Pushed2 months ago
Size37 MB
Packages50
Flavoralpine
OS3.20
Runtime8.3.11
The base image is also available under the supported tag(s): 8-alpine3.20, 8-cli-alpine, 8-cli-alpine3.20, 8.3-alpine, 8.3-alpine3.20, 8.3-cli-alpine, 8.3-cli-alpine3.20, alpine, alpine3.20, cli-alpine, cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.
TagDetailsPushedVulnerabilities
8-alpine
Newer image for same tag
Also known as:
  • 8.3.13-cli-alpine
  • 8.3.13-cli-alpine3.20
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.20
  • 8-cli-alpine
  • 8-cli-alpine3.20
  • cli-alpine
  • cli-alpine3.20
  • alpine
  • alpine3.20
  • 8.3.13-alpine
  • 8.3.13-alpine3.20
  • 8.3-alpine
  • 8.3-alpine3.20
  • 8-alpine3.20
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Newer image for same tag
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8-alpine was pulled 1.6K times last month
Image details:
  • Size: 39 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.3.13
2 weeks ago



Change base image

✅ There are no tag recommendations at this time.

@github-actions
Copy link

🔍 Vulnerabilities of wayofdev/php-dev:latest

📦 Image Reference wayofdev/php-dev:latest
digestsha256:6f913be20a3a686b02e7480bb2d2b3711a472283d2ab32ddfdb9f0b71fdfc237
vulnerabilitiescritical: 0 high: 4 medium: 0 low: 0
size103 MB
packages230
📦 Base Image php:8-fpm-alpine
also known as
  • 8-fpm-alpine3.20
  • 8.3-fpm-alpine
  • 8.3-fpm-alpine3.20
  • 8.3.11-fpm-alpine
  • 8.3.11-fpm-alpine3.20
  • fpm-alpine
  • fpm-alpine3.20
digestsha256:6cf4a9ecc6a3626c62b37f83190750e6ea76a65c924ec6900d1c5b6d0e2456fc
vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
critical: 0 high: 3 medium: 0 low: 0 stdlib 1.22.5 (golang)

pkg:golang/stdlib@1.22.5

high : CVE--2024--34158

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

high : CVE--2024--34156

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

high : CVE--2022--30635

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.19%
EPSS Percentile57th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

critical: 0 high: 1 medium: 0 low: 0 postgresql16 16.3-r0 (apk)

pkg:apk/alpine/postgresql16@16.3-r0?os_name=alpine&os_version=3.20

high : CVE--2024--7348

Affected range<16.4-r0
Fixed version16.4-r0
EPSS Score0.05%
EPSS Percentile20th percentile
Description

@github-actions
Copy link

github-actions bot commented Nov 13, 2024

Outdated

Recommended fixes for image wayofdev/php-dev:latest

Base image is php:8.2-alpine

Name8.2.23-alpine3.20
Digestsha256:664c504580bbf49e465ef58c3a501ea48c21fbfbef991f34bee822a670fbad49
Vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
Pushed2 months ago
Size36 MB
Packages50
Flavoralpine
OS3.20
Runtime8.2.23
The base image is also available under the supported tag(s): 8.2-alpine3.20, 8.2-cli-alpine, 8.2-cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.
TagDetailsPushedVulnerabilities
8.2-alpine
Newer image for same tag
Also known as:
  • 8.2.25-cli-alpine
  • 8.2.25-cli-alpine3.20
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.20
  • 8.2.25-alpine
  • 8.2.25-alpine3.20
  • 8.2-alpine3.20
Benefits:
  • Patch runtime version update
  • Same OS detected
  • Newer image for same tag
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.2-alpine was pulled 1.8K times last month
Image details:
  • Size: 38 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.2.25
2 weeks ago



Change base image

TagDetailsPushedVulnerabilities
8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.13-cli-alpine
  • 8.3.13-cli-alpine3.20
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.20
  • 8-cli-alpine
  • 8-cli-alpine3.20
  • cli-alpine
  • cli-alpine3.20
  • alpine
  • alpine3.20
  • 8.3.13-alpine
  • 8.3.13-alpine3.20
  • 8.3-alpine3.20
  • 8-alpine
  • 8-alpine3.20
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
Image details:
  • Size: 39 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.3.13
2 weeks ago



@github-actions
Copy link

Recommended fixes for image wayofdev/php-dev:latest

Base image is php:8.1-fpm-alpine

Name8.1.29-fpm-alpine3.20
Digestsha256:c2a4daca3f96f06a5b3fa60bf58d933e147e43b607b87dffdd31f0e430843848
Vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
Pushed2 months ago
Size31 MB
Packages51
Flavoralpine
OS3.20
Runtime8.1.29
The base image is also available under the supported tag(s): 8.1-fpm-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.
TagDetailsPushedVulnerabilities
8.1-fpm-alpine
Newer image for same tag
Also known as:
  • 8.1.30-fpm-alpine
  • 8.1.30-fpm-alpine3.20
  • 8.1-fpm-alpine3.20
Benefits:
  • Patch runtime version update
  • Same OS detected
  • Newer image for same tag
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.1-fpm-alpine was pulled 18K times last month
Image details:
  • Size: 34 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.1.30
1 month ago



Change base image

TagDetailsPushedVulnerabilities
8.2-fpm-alpine
Minor runtime version update
Also known as:
  • 8.2.25-fpm-alpine
  • 8.2.25-fpm-alpine3.20
  • 8.2-fpm-alpine3.20
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.2-fpm-alpine was pulled 4.1K times last month
Image details:
  • Size: 34 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.2.25
2 weeks ago



8.3-fpm-alpine
Image introduces no new vulnerability but removes 3
Also known as:
  • 8.3.13-fpm-alpine
  • 8.3.13-fpm-alpine3.20
  • 8.3-fpm-alpine3.20
  • 8-fpm-alpine
  • 8-fpm-alpine3.20
  • fpm-alpine
  • fpm-alpine3.20
Benefits:
  • Same OS detected
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
Image details:
  • Size: 35 MB
  • Flavor: alpine
  • OS: 3.20
2 weeks ago



@github-actions
Copy link

Recommended fixes for image wayofdev/php-dev:latest

Base image is php:8-fpm-alpine

Namefpm-alpine3.20
Digestsha256:6cf4a9ecc6a3626c62b37f83190750e6ea76a65c924ec6900d1c5b6d0e2456fc
Vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
Pushed2 months ago
Size32 MB
Packages51
Flavoralpine
OS3.20
The base image is also available under the supported tag(s): 8-fpm-alpine3.20, 8.3-fpm-alpine, 8.3-fpm-alpine3.20, fpm-alpine, fpm-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.
TagDetailsPushedVulnerabilities
8-fpm-alpine
Newer image for same tag
Also known as:
  • 8.3.13-fpm-alpine
  • 8.3.13-fpm-alpine3.20
  • 8.3-fpm-alpine
  • 8.3-fpm-alpine3.20
  • 8-fpm-alpine3.20
  • fpm-alpine
  • fpm-alpine3.20
Benefits:
  • Same OS detected
  • Newer image for same tag
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8-fpm-alpine was pulled 4.8K times last month
Image details:
  • Size: 35 MB
  • Flavor: alpine
  • OS: 3.20
2 weeks ago



Change base image

TagDetailsPushedVulnerabilities
8.2-fpm-alpine
Minor runtime version update
Also known as:
  • 8.2.25-fpm-alpine
  • 8.2.25-fpm-alpine3.20
  • 8.2-fpm-alpine3.20
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.2-fpm-alpine was pulled 4.1K times last month
Image details:
  • Size: 34 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.2.25
2 weeks ago



8.1-fpm-alpine
Minor runtime version update
Also known as:
  • 8.1.30-fpm-alpine
  • 8.1.30-fpm-alpine3.20
  • 8.1-fpm-alpine3.20
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.1-fpm-alpine is the fourth most popular tag with 18K pulls per month
Image details:
  • Size: 34 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.1.30
1 month ago



@way-finder-bot way-finder-bot self-requested a review November 13, 2024 15:10
@way-finder-bot way-finder-bot self-assigned this Nov 13, 2024
@renovate renovate bot merged commit 9da2fd7 into master Nov 13, 2024
16 checks passed
@renovate renovate bot deleted the renovate/actions-checkout-4.x branch November 13, 2024 15:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type: maintenance For maintenance, refactor and testing (perf, chore, style, revert, refactor, test, build, ci)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants