  
|
7c94a307d0
|
fixes krkn source dependencies cves and introduces grype scan in GH Action (#1336)
* adding member request information
Signed-off-by: Paige Patton <prubenda@redhat.com>
Assisted By: Claude Code:
fixes krkn source dependencies cves
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
introduced grype scan on github images
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
golang downgrade
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
golang dependency pinning
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
golang dependency pinning
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
setuptools downgrade
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
go-ntlmssp downgrade
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
security scan in summary
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
setuptools downgrade
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
upgrade to fedora 45
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
golang dependencies
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
removed pinned dependencies
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
pinned dependency for oc latest
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
golang stdlib stable version
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
upgrading oc release
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
upgrading yq
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
yq build in pipeline
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
pinned transitive dependencies
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
removed not working
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
buildkit unpinned
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
other pinned dependencies
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
other pinned
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
other pinned
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
go work vendor
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
other pinned
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
pin buildkit and distribution
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
reinstated distribution
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
nit
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
SECURITY.md
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
feat: add Grype security scanning badge and comprehensive security policy
- Add security badge job to docker-image workflow
- Generates detailed badge showing C:X H:Y M:Z vulnerability counts
- Runs on every push to main branch
- Publishes badge to krkn-lib-docs repository
- Uses Grype to scan container image for CVEs
- Dynamic color based on severity (green/yellow/orange/red)
- Add security badge to README.md
- Displays current vulnerability baseline
- Placed after coverage badge for visibility
- Enhance SECURITY.md with CNCF-ready security policy
- Document proactive security approach with Grype CI/CD integration
- Define security baseline: 0 Critical, 7 High, 3 Medium, 0 Low (12 total)
- Detail accepted risks with mitigation strategies
- Document all 12 known CVEs in transitive dependencies
- Explain why each CVE cannot be fixed (dependency constraints)
- Establish quarterly review process for accepted risks
- Add SLA commitments for vulnerability remediation
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
fix: remove moby/buildkit v0.28.1 pin that breaks oc build
The moby/buildkit v0.28.1 upgrade has breaking API changes (undefined: archive.Compression)
that are incompatible with docker/docker v28.5.2 vendored in oc.
This CVE is documented as accepted risk in SECURITY.md.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
DCO
krkn-lib update
krkn-lib update
* increased krkn-lib version
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
---------
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
Co-authored-by: Paige Patton <prubenda@redhat.com>
|
2026-05-20 14:21:51 -04:00 |
|
 Paige Patton
|
3db5e1abbe
|
no rebuild image (#1197)
Signed-off-by: Paige Patton <prubenda@redhat.com>
|
2026-03-20 12:54:45 -04:00 |
|
|
Paige Patton
|
1e699c6cc9
|
different quay users (#1196)
Signed-off-by: Paige Patton <prubenda@redhat.com>
|
2026-03-20 17:30:42 +01:00 |
|
|
Paige Patton
|
0ebda3e101
|
test multi platform (#1194)
Signed-off-by: Paige Patton <prubenda@redhat.com>
|
2026-03-20 11:09:33 -04:00 |
|
|
Tullio Sebastiani
|
4fea1a354d
|
added krknctl types to krkn baseimage for global variables (#741)
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 7m55s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped
* added krknctl types to krkn baseimage for global variables
fixed
* fixed dockerfile
* dockerfile compile script
fix
|
2025-01-07 10:12:37 -05:00 |
|
|
Paige Patton
|
4d3491da0f
|
adidng action token passing (#671)
rh-pre-commit.version: 2.2.0
rh-pre-commit.check-secrets: ENABLED
Signed-off-by: Paige Rubendall <prubenda@redhat.com>
|
2024-07-15 12:50:20 -04:00 |
|
 Tullio Sebastiani
|
d8f54b83a2
|
fixed image push issue
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
|
2024-07-05 10:32:01 -04:00 |
|
|
Tullio Sebastiani
|
4870c86515
|
moves the krkn-hub build from push on main to tag (#660)
* moves the krkn-hub build from push on main to tag + final image enhancement
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
fixed syntax
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
typo
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
typo
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
* quotes
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
---------
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
|
2024-07-05 16:09:34 +02:00 |
|
|
Tullio Sebastiani
|
5f836f294b
|
Kill pod arca plugin update adaptation (#656)
* new kill-pod interface adaptation
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
* unit test fix
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
* requirements update
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
* fixed duplicate requirement
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
* added conditional dockerfile build
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
fix
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
fix
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
fix
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
removed useless print
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
---------
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
|
2024-07-03 15:50:43 +02:00 |
|
|
Paige Rubendall
|
fa59834bae
|
updating release versin (#565)
Signed-off-by: Paige Rubendall <prubenda@redhat.com>
|
2024-01-25 11:12:00 -05:00 |
|
|
Paige Rubendall
|
631f12bdff
|
Adding push to both red hat and krkn chaos quay (#550)
* adding push to both red hat and krkn chaos quay
* tag redhat chaos from krkn-chaos image
* login to both quays
|
2024-01-12 13:58:50 -05:00 |
|
|
Paige Rubendall
|
6197fc6722
|
separating build and test workflows (#448)
* separating build and test workflows
* only run build on pull request
|
2023-07-20 16:01:50 -04:00 |
|
 sanjacodes
|
9810649c62
|
Clean up and start figuring out CI failures
|
2022-06-02 09:12:19 -05:00 |
|
|
Sanja Bonic
|
96dd08a0de
|
Fix reusable workflows top-level reference issue
|
2022-05-04 16:31:22 -04:00 |
|
|
Sanja
|
1dd3b836ee
|
Remove 3rd party action and use reusable workflow (#235)
|
2022-05-04 14:40:32 +02:00 |
|
|
Paige Rubendall
|
eeac4ff9d3
|
need updated krkn-hub link in docker ci
|
2022-04-25 15:45:47 -04:00 |
|
|
Paige Rubendall
|
c1fb82e245
|
adding new quay repo
|
2022-04-25 10:25:51 -04:00 |
|
|
Sanja Bonic
|
0bd543a339
|
Add build container step to PRs, fix typos (#226)
|
2022-04-12 18:46:26 +02:00 |
|
|
Paige Rubendall
|
4a37659416
|
Adding docker image build and push to github actions
|
2021-11-04 22:33:26 -04:00 |
|