plugin-drone-kaniko-ecr/docker/gar/Dockerfile.linux.amd64 at b3a3c978e50f172e3d110fa67ab8c3cd94de7862 - plugin-drone-kaniko-ecr - Colovu

third/plugin-drone-kaniko-ecr

mirror of https://github.com/drone/drone-kaniko.git synced 2026-07-15 18:16:06 +08:00

Files

T

abhay084 b3a3c978e5 fix: [CI-23751]: bump kaniko-executor base to 1.25.16 to fix symlink regression

kaniko-executor 1.25.15 (Chainguard fork) shipped an overly-strict
securejoin path check (upstream PR #326) that rejects valid `..`-relative
symlinks resolving to an in-image absolute path, e.g. the Java trust-store
link /etc/pki/java/cacerts, failing the build during tar extraction with
"symlink target ... resolves outside destination".

Upstream fixed this in chainguard-forks/kaniko v1.25.16 (PR #440, "store
symlink targets verbatim during tar extraction"). Bump FROM base image and
KANIKO_VERSION 1.25.15 -> 1.25.16 across all registry variants
(docker/ecr/gcr/acr/gar, amd64 + arm64).

Depends on harnesscommunity/kaniko-executor:1.25.16-linux-{amd64,arm64}
being published to Docker Hub before this can be built/released.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-14 13:33:02 -07:00

6 lines

164 B

Docker

Raw Blame History

 FROM harnesscommunity/kaniko-executor:1.25.16-linux-amd64
 ENV KANIKO_VERSION=1.25.16
 ADD release/linux/amd64/kaniko-gar /kaniko/
 ENTRYPOINT ["/kaniko/kaniko-gar"]