Compare commits

..

3 Commits

Author SHA1 Message Date
Gargithakur01 af74468789 fix: [CI-23227]: bump golang.org/x/net to v0.55.0
Resolves CVE-2026-39821 (x/net/idna Improper Authentication, Critical)
and CVE-2026-33814 (x/net/http2 Infinite loop, High) surfaced in the
kaniko-acr plugin binary.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-24 19:02:59 +05:30
Gargithakur01 3b94e510b6 fix: [CI-23227]: bump vbatts/tar-split to v0.12.2
Resolves the High-severity tar-split (archive/tar) vulnerability flagged
by Snyk in the kaniko-docker plugin binary. tar-split is pulled in
transitively via go-containerregistry -> estargz. go mod tidy also nudged
urfave/cli v1.22.15 -> v1.22.16 (benign patch).

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-24 15:18:44 +05:30
Gargithakur01 c4e18cc2c3 fix: [CI-23227]: Vuln-Fix-Kaniko
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-24 15:16:17 +05:30
10 changed files with 20 additions and 20 deletions
+2 -2
View File
@@ -1,5 +1,5 @@
FROM harnesscommunity/kaniko-executor:1.25.16-linux-amd64
FROM harnesscommunity/kaniko-executor:1.25.15-linux-amd64
ENV KANIKO_VERSION=1.25.16
ENV KANIKO_VERSION=1.25.15
ADD release/linux/amd64/kaniko-acr /kaniko/
ENTRYPOINT ["/kaniko/kaniko-acr"]
+2 -2
View File
@@ -1,8 +1,8 @@
FROM harnesscommunity/kaniko-executor:1.25.16-linux-arm64
FROM harnesscommunity/kaniko-executor:1.25.15-linux-arm64
ENV HOME /root
ENV USER root
ENV KANIKO_VERSION=1.25.16
ENV KANIKO_VERSION=1.25.15
ADD release/linux/arm64/kaniko-acr /kaniko/
ENTRYPOINT ["/kaniko/kaniko-acr"]
+2 -2
View File
@@ -1,5 +1,5 @@
FROM harnesscommunity/kaniko-executor:1.25.16-linux-amd64
FROM harnesscommunity/kaniko-executor:1.25.15-linux-amd64
ENV KANIKO_VERSION=1.25.16
ENV KANIKO_VERSION=1.25.15
ADD release/linux/amd64/kaniko-docker /kaniko/
ENTRYPOINT ["/kaniko/kaniko-docker"]
+2 -2
View File
@@ -1,8 +1,8 @@
FROM harnesscommunity/kaniko-executor:1.25.16-linux-arm64
FROM harnesscommunity/kaniko-executor:1.25.15-linux-arm64
ENV HOME /root
ENV USER root
ENV KANIKO_VERSION=1.25.16
ENV KANIKO_VERSION=1.25.15
ADD release/linux/arm64/kaniko-docker /kaniko/
ENTRYPOINT ["/kaniko/kaniko-docker"]
+2 -2
View File
@@ -1,5 +1,5 @@
FROM harnesscommunity/kaniko-executor:1.25.16-linux-amd64
FROM harnesscommunity/kaniko-executor:1.25.15-linux-amd64
ENV KANIKO_VERSION=1.25.16
ENV KANIKO_VERSION=1.25.15
ADD release/linux/amd64/kaniko-ecr /kaniko/
ENTRYPOINT ["/kaniko/kaniko-ecr"]
+2 -2
View File
@@ -1,8 +1,8 @@
FROM harnesscommunity/kaniko-executor:1.25.16-linux-arm64
FROM harnesscommunity/kaniko-executor:1.25.15-linux-arm64
ENV HOME /root
ENV USER root
ENV KANIKO_VERSION=1.25.16
ENV KANIKO_VERSION=1.25.15
ADD release/linux/arm64/kaniko-ecr /kaniko/
ENTRYPOINT ["/kaniko/kaniko-ecr"]
+2 -2
View File
@@ -1,5 +1,5 @@
FROM harnesscommunity/kaniko-executor:1.25.16-linux-amd64
FROM harnesscommunity/kaniko-executor:1.25.15-linux-amd64
ENV KANIKO_VERSION=1.25.16
ENV KANIKO_VERSION=1.25.15
ADD release/linux/amd64/kaniko-gar /kaniko/
ENTRYPOINT ["/kaniko/kaniko-gar"]
+2 -2
View File
@@ -1,8 +1,8 @@
FROM harnesscommunity/kaniko-executor:1.25.16-linux-arm64
FROM harnesscommunity/kaniko-executor:1.25.15-linux-arm64
ENV HOME /root
ENV USER root
ENV KANIKO_VERSION=1.25.16
ENV KANIKO_VERSION=1.25.15
ADD release/linux/arm64/kaniko-gar /kaniko/
ENTRYPOINT ["/kaniko/kaniko-gar"]
+2 -2
View File
@@ -1,5 +1,5 @@
FROM harnesscommunity/kaniko-executor:1.25.16-linux-amd64
FROM harnesscommunity/kaniko-executor:1.25.15-linux-amd64
ENV KANIKO_VERSION=1.25.16
ENV KANIKO_VERSION=1.25.15
ADD release/linux/amd64/kaniko-gcr /kaniko/
ENTRYPOINT ["/kaniko/kaniko-gcr"]
+2 -2
View File
@@ -1,8 +1,8 @@
FROM harnesscommunity/kaniko-executor:1.25.16-linux-arm64
FROM harnesscommunity/kaniko-executor:1.25.15-linux-arm64
ENV HOME /root
ENV USER root
ENV KANIKO_VERSION=1.25.16
ENV KANIKO_VERSION=1.25.15
ADD release/linux/arm64/kaniko-gcr /kaniko/
ENTRYPOINT ["/kaniko/kaniko-gcr"]