From 99725367bdc8e1e5afc9b0d23442eacff3693fef Mon Sep 17 00:00:00 2001 From: "octo-sts[bot]" <157150467+octo-sts@users.noreply.github.com> Date: Fri, 9 Jan 2026 23:28:55 +0000 Subject: [PATCH] skopeo/1.21.0-r1: fix GHSA-cgrx-mc8f-2prm --- skopeo.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/skopeo.yaml b/skopeo.yaml index 39281396df5..7a6f628d686 100644 --- a/skopeo.yaml +++ b/skopeo.yaml @@ -1,7 +1,7 @@ package: name: skopeo version: "1.21.0" - epoch: 1 # GHSA-f83f-xpx7-ffpw + epoch: 2 # GHSA-cgrx-mc8f-2prm description: Work with remote images registries - retrieving information, images, signing content copyright: - license: Apache-2.0 @@ -22,6 +22,7 @@ pipeline: deps: |- golang.org/x/crypto@v0.45.0 github.com/sigstore/fulcio@v1.8.3 + github.com/opencontainers/selinux@v1.13.0 - uses: go/build with: