 Paige Patton
|
55d8bf7062
|
no build isolation (#1430)
Assisted By: Claude Code:
Assisted By: Claude Code:
Signed-off-by: Paige Patton <prubenda@redhat.com>
|
2026-06-30 13:43:34 -04:00 |
|
  
|
7c94a307d0
|
fixes krkn source dependencies cves and introduces grype scan in GH Action (#1336)
* adding member request information
Signed-off-by: Paige Patton <prubenda@redhat.com>
Assisted By: Claude Code:
fixes krkn source dependencies cves
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
introduced grype scan on github images
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
golang downgrade
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
golang dependency pinning
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
golang dependency pinning
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
setuptools downgrade
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
go-ntlmssp downgrade
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
security scan in summary
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
setuptools downgrade
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
upgrade to fedora 45
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
golang dependencies
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
removed pinned dependencies
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
pinned dependency for oc latest
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
golang stdlib stable version
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
upgrading oc release
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
upgrading yq
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
yq build in pipeline
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
pinned transitive dependencies
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
removed not working
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
buildkit unpinned
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
other pinned dependencies
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
other pinned
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
other pinned
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
go work vendor
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
other pinned
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
pin buildkit and distribution
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
reinstated distribution
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
nit
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
SECURITY.md
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
feat: add Grype security scanning badge and comprehensive security policy
- Add security badge job to docker-image workflow
- Generates detailed badge showing C:X H:Y M:Z vulnerability counts
- Runs on every push to main branch
- Publishes badge to krkn-lib-docs repository
- Uses Grype to scan container image for CVEs
- Dynamic color based on severity (green/yellow/orange/red)
- Add security badge to README.md
- Displays current vulnerability baseline
- Placed after coverage badge for visibility
- Enhance SECURITY.md with CNCF-ready security policy
- Document proactive security approach with Grype CI/CD integration
- Define security baseline: 0 Critical, 7 High, 3 Medium, 0 Low (12 total)
- Detail accepted risks with mitigation strategies
- Document all 12 known CVEs in transitive dependencies
- Explain why each CVE cannot be fixed (dependency constraints)
- Establish quarterly review process for accepted risks
- Add SLA commitments for vulnerability remediation
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
fix: remove moby/buildkit v0.28.1 pin that breaks oc build
The moby/buildkit v0.28.1 upgrade has breaking API changes (undefined: archive.Compression)
that are incompatible with docker/docker v28.5.2 vendored in oc.
This CVE is documented as accepted risk in SECURITY.md.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
DCO
krkn-lib update
krkn-lib update
* increased krkn-lib version
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
---------
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
Co-authored-by: Paige Patton <prubenda@redhat.com>
|
2026-05-20 14:21:51 -04:00 |
|
|
Paige Patton
|
7d4aba9df6
|
adding kubectl cli (#1321)
Assisted By: Claude Code:
Assisted By: Claude Code:
Signed-off-by: Paige Patton <prubenda@redhat.com>
|
2026-05-14 13:55:08 -04:00 |
|
 Arpit Raj
|
1623dbac53
|
fix: resolve Python version mismatch in container entrypoint (#1222)
Signed-off-by: 1PoPTRoN <vrxn.arp1traj@gmail.com>
|
2026-04-08 09:00:37 -04:00 |
|
|
Paige Patton
|
898ce76648
|
adding python3.11 updates (#1012)
Signed-off-by: Paige Patton <prubenda@redhat.com>
|
2026-02-02 12:00:33 -05:00 |
|
|
Tullio Sebastiani
|
fd3e7ee2c8
|
Fixes several Image cves (#941)
* fixes some CVEs on the base image
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
* oc dependencies updated
* virtctl build
fix
removed virtctil installation
pip
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
---------
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
|
2025-11-11 19:50:12 +01:00 |
|
|
Paige Patton
|
6629c7ec33
|
adding virt checks (#932)
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 8m46s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped
Assisted By: Claude Code
Signed-off-by: Paige Patton <prubenda@redhat.com>
|
2025-11-05 21:17:21 -05:00 |
|
|
Paige Patton
|
8c05e44c23
|
adding ssh install and virtctl version
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 9m59s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped
Signed-off-by: Paige Patton <prubenda@redhat.com>
|
2025-09-04 13:57:34 -07:00 |
|
|
Paige Patton
|
84169e2d4e
|
adding no scenario type (#869)
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 5m32s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped
Signed-off-by: Paige Patton <prubenda@redhat.com>
|
2025-08-29 08:55:06 -04:00 |
|
 Sahil Shah
|
05bc404d32
|
Adding IPMI tool to dockerfile
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 10m56s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped
Signed-off-by: Sahil Shah <sahshah@redhat.com>
|
2025-08-25 12:28:03 -04:00 |
|
  
|
ca6995a1a1
|
[Snyk] Fix for 3 vulnerabilities (#859)
* fix: requirements.txt to reduce vulnerabilities
The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-PROTOBUF-10364902
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-10390193
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-10390194
* partial vulnerability fix
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
---------
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
Co-authored-by: snyk-bot <snyk-bot@snyk.io>
Co-authored-by: Tullio Sebastiani <tsebasti@redhat.com>
|
2025-07-22 16:50:31 +02:00 |
|
|
Tullio Sebastiani
|
cfe624f153
|
changed get_node_ip to krkn-lib and removed kubectl dependency (#799)
* changed get_node_ip to krkn-lib and removed kubectl dependency
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
* updated krkn-lib to 5.0.1
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
---------
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
|
2025-05-07 15:43:27 +02:00 |
|
|
Tullio SebastianiandNaga Ravi Chaitanya Elluri
|
9c5251d52f
|
setuptools + golang stdlib (#781)
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 4m54s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped
* setuptools + golang stdlib
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
* equals
---------
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
Co-authored-by: Naga Ravi Chaitanya Elluri <nelluri@redhat.com>
|
2025-03-24 14:41:25 +01:00 |
|
|
Tullio Sebastiani
|
57a747a34a
|
fix funtests on main branch + removed golang vulnerabilities (#777)
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 3m30s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped
* fix funtests on main branch + removed golang vulnerabilities
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
* upgraded go to 1.23.0 + library updates
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
---------
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
|
2025-03-20 13:12:19 +01:00 |
|
|
Tullio Sebastiani
|
64cfd2ca4d
|
fixes krknctl describe bug
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 4m36s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped
|
2025-01-20 09:43:59 -05:00 |
|
|
Tullio Sebastiani
|
4fea1a354d
|
added krknctl types to krkn baseimage for global variables (#741)
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 7m55s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped
* added krknctl types to krkn baseimage for global variables
fixed
* fixed dockerfile
* dockerfile compile script
fix
|
2025-01-07 10:12:37 -05:00 |
|