third/plugin-drone-kaniko
1
0
Fork 0
mirror of https://github.com/drone/drone-kaniko.git synced 2026-07-16 16:21:10 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: [CI-23751]: bump kaniko-executor base to 1.25.16 to fix symlink regression

Browse Source 
kaniko-executor 1.25.15 (Chainguard fork) shipped an overly-strict
securejoin path check (upstream PR #326) that rejects valid `..`-relative
symlinks resolving to an in-image absolute path, e.g. the Java trust-store
link /etc/pki/java/cacerts, failing the build during tar extraction with
"symlink target ... resolves outside destination".

Upstream fixed this in chainguard-forks/kaniko v1.25.16 (PR #440, "store
symlink targets verbatim during tar extraction"). Bump FROM base image and
KANIKO_VERSION 1.25.15 -> 1.25.16 across all registry variants
(docker/ecr/gcr/acr/gar, amd64 + arm64).

Depends on harnesscommunity/kaniko-executor:1.25.16-linux-{amd64,arm64}
being published to Docker Hub before this can be built/released.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
abhay084
2026-07-14 13:33:02 -07:00
parent 9dc5b4eb4a
commit b3a3c978e5
10 changed files with 20 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker/gar/Dockerfile.linux.arm64
+2 -2
View File
@@ -1,8 +1,8 @@
FROM harnesscommunity/kaniko-executor:1.25.15-linux-arm64
FROM harnesscommunity/kaniko-executor:1.25.16-linux-arm64
ENV HOME /root
ENV USER root
ENV KANIKO_VERSION=1.25.15
ENV KANIKO_VERSION=1.25.16
ADD release/linux/arm64/kaniko-gar /kaniko/
ENTRYPOINT ["/kaniko/kaniko-gar"]