Commit Graph
38 Commits
Author SHA1 Message Date
Cristian Leonte a16da5812d build: bump base image from alpine:3.23 to alpine:3.24
The published stefanprodan/podinfo:latest image (built 2026-06-18 on
Alpine 3.23.4) has since accumulated real CVEs disclosed against its
pinned OS packages: curl/libcurl (CVE-2026-5773, CVE-2026-6276, plus
6 medium-severity curl CVEs), c-ares (CVE-2026-33630), and
libssl3/libcrypto3 (CVE-2026-45447, plus 4 medium-severity openssl
CVEs). None of these are Go module vulnerabilities - govulncheck finds
none - they're stale Alpine package versions baked into an old image
build.

Bumping to alpine:3.24 (currently 3.24.1) resolves all of them: built
and scanned this image with Trivy, 0 vulnerabilities found across the
Alpine packages and both Go binaries (podinfo, podcli). Also smoke
tested the container serving /healthz.

Fixes #502
2026-07-20 12:20:09 +03:00
Stefan Prodan 420b2f64b8 Build with Go 1.26
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2026-03-01 10:05:27 +02:00
Stefan Prodan e51374c0ec Release 6.9.4
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2025-12-07 21:58:53 +02:00
Stefan Prodan 98e8cd39d4 Build with Go 1.25
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2025-09-10 22:51:09 +03:00
Stefan Prodan dc39bd9a08 Update Alpine to 3.22
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2025-07-12 13:06:56 +03:00
Benoit Tigeot 2dbf735c46 Prevent warning with docker buildx build command
Without this patch
```
 1 warning found (use docker --debug to expand):
 - FromAsCasing: 'as' and 'FROM' keywords' casing do not match (line 1)
```
2025-06-12 21:22:51 +02:00
Stefan Prodan 8efcd73510 Build with Go 1.24
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2025-03-11 11:13:59 +02:00
Stefan Prodan 4af7854aa2 Bump Go to 1.23
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2024-10-07 15:56:05 +03:00
Stefan Prodan d791dedb24 Update Alpine to 3.20
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2024-05-23 11:19:15 +03:00
Stefan Prodan 44942884c3 Update dependencies to Go 1.22
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2024-03-26 14:19:26 +02:00
Stefan Prodan a69f0282fd Update Alpine to 3.19
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2023-12-17 15:07:34 +02:00
Stefan Prodan 29dd482f49 Build with Go 1.21
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2023-08-10 15:04:03 +03:00
Stefan Prodan 45cfe3abc2 Update base image to Alpine 3.18
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2023-06-26 12:57:54 +03:00
Stefan Prodan 21136b6405 build: Update Go to 1.20
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2023-02-03 12:45:46 +02:00
Stefan Prodan b687d3c76f Update Alpine to v3.17
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-12-21 12:53:43 +02:00
Stefan Prodan 25a1e26159 Build with Go 1.19
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-09-29 12:24:20 +03:00
Stefan Prodan f4199ab8bc Update Go to 1.18 and Alpine to 3.16
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-05-24 12:09:08 +03:00
Stefan Prodan 170b912d25 Update Go to v1.17
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-03-09 15:06:55 +02:00
Stefan Prodan 70ab46cd6e Update Alpine to v3.14
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-06-16 15:16:43 +03:00
Stefan Prodan 885a35eebf Update Go to v1.16
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-03-21 13:37:26 +02:00
Anton Vorobiev 9e066ebc7b Fix adduser param to actually use 'app' group 2021-01-23 21:58:49 +01:00
stefanprodan 5cd072243d Update Go to v1.15 2020-09-20 13:36:57 +03:00
stefanprodan 5833d41e85 Publish multi-arch image to GHCR 2020-09-20 13:27:05 +03:00
stefanprodan 1b4131b5ad Update Alpine to 3.12 2020-06-12 13:49:06 +03:00
stefanprodan fd1814052a Add opencontainers metadata 2020-05-27 17:02:23 +03:00
stefanprodan 7d2bc4905a Push releases to Docker Hub for ARM64 and ARM v6/v7 2020-05-20 17:35:38 +03:00
stefanprodan f75f6e9fbc Publish multi-arch image with Docker buildx 2020-05-20 15:56:11 +03:00
stefanprodan 2c7029cf35 Update go and alpine
- update go to 1.14
- update alpine to 3.11
- update packages
2020-03-24 12:50:15 +02:00
stefanprodan 319d57cb68 Update to go 1.13 2019-09-27 17:04:39 +03:00
stefanprodan f9ce51da4b Push container on release 2019-08-06 15:32:37 +03:00
stefanprodan 9bd14c1ba7 Use go proxy and modules 2019-08-06 15:06:16 +03:00
stefanprodan e2efee0bdf Remove docs and build dirs 2019-08-06 12:14:09 +03:00
Stefan Prodan a945842e9b Add VueJS UI 2018-08-13 14:52:49 +03:00
Stefan Prodan 7bc9bd6c13 run as non root on amd64 2018-03-23 23:36:56 +02:00
Stefan Prodan 7de05f40c4 remove entry point 2018-03-19 17:51:02 +02:00
Stefan Prodan e48ae2711f v0.2.1 release
- use debug level for web server logging
 - update canary deploy
2018-03-18 17:24:57 +02:00
Stefan Prodan 5f9a5248b6 added netcat to amd64 image 2018-03-07 11:19:10 +02:00
Stefan Prodan fe9bfc8bfe multi-arch build 2018-01-05 19:45:25 +02:00