chore(security): apply security updates for MTV images #3950
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Hazanel
requested review from
mnecas,
mrnold,
solenoci and
yaacov
as code owners
Hazanel
changed the title
Hazanel
changed the title
Hazanel
changed the title
|
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #3950 +/- ##
=========================================
- Coverage 15.45% 9.07% -6.39%
=========================================
Files 112 392 +280
Lines 23377 47469 +24092
=========================================
+ Hits 3613 4306 +693
- Misses 19479 42781 +23302
- Partials 285 382 +97
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
Add security update commands to Containerfiles to ensure all packages are updated with latest security patches during image build. This addresses vulnerabilities identified in clair-scan reports. Changes: - Add conditional dnf/microdnf check in Containerfiles for UBI9-minimal - Use 'dnf update -y --security' for targeted security updates when dnf is available - Use 'microdnf update -y' when only microdnf is available (minimal UBI images) - Combine RUN commands to reduce image layers - Apply same security update pattern to both upstream and downstream Containerfiles Updated images: - forklift-api - forklift-ova-provider-server - forklift-ova-proxy - populator-controller - vsphere-xcopy-volume-populator Resolves: None Signed-off-by: Elad Hazan <ehazan@redhat.com>
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uses
dnf update -y --securitywhendnfis available (full UBI images) Falls back tomicrodnf update -ywhen onlymicrodnfis available (minimal UBI images)