INSIGHTS-379 - Fix vulnerabilities for insights-plugins after trivy u…

…pgrade (#968)

* Upgrading trivy for scanning to 0.55.2

* Fixed issues

* Fixed issues

* Fixed issues

* Fixed issues

* Fixed issues

* Fixed issues

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Bumped versions

* Bumped versions

* Bumped versions

* Bumped versions

* Bumped versions

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

go.work

@@ -1,4 +1,4 @@
-go 1.22.6
+go 1.22.7
 
 use (
 	./plugins/admission

go.work.sum

@@ -387,8 +387,10 @@ github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.14.11/go.mod h1:cRrYDYAMUohBJUt
 github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.15.2/go.mod h1:iRlGzMix0SExQEviAyptRWRGdYNo3+ufW/lCzvKVTUc=
 github.com/aws/aws-sdk-go-v2/internal/configsources v1.2.10/go.mod h1:6BkRjejp/GR4411UGqkX8+wFMbFbqsUIimfK4XjOKR4=
 github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.2/go.mod h1:wRQv0nN6v9wDXuWThpovGQjqF1HFdcgWjporw14lS8k=
+github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.18/go.mod h1:r506HmK5JDUh9+Mw4CfGJGSSoqIiLCndAuqXuhbv67Y=
 github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.5.10/go.mod h1:6UV4SZkVvmODfXKql4LCbaZUpF7HO2BX38FgBf9ZOLw=
 github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.2/go.mod h1:tyF5sKccmDz0Bv4NrstEr+/9YkSPJHrcO7UsUKf7pWM=
+github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.18/go.mod h1:DkKMmksZVVyat+Y+r1dEOgJEfUeA7UngIHWeKsi0yNc=
 github.com/aws/aws-sdk-go-v2/internal/ini v1.7.3/go.mod h1:6fQQgfuGmw8Al/3M2IgIllycxV7ZW7WCdVSqfBeUiCY=
 github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0/go.mod h1:8tu/lYfQfFe6IGnaOdrpVgEL2IrrDOf6/m9RQum4NkY=
 github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.10.4/go.mod h1:2aGXHFmbInwgP9ZfpmdIfOELL79zhdNYNmReK8qDfdQ=
@@ -1045,6 +1047,7 @@ golang.org/x/crypto v0.22.0/go.mod h1:vr6Su+7cTlO45qkww3VDJlzDn0ctJvRgYbC2NvXHt+
 golang.org/x/crypto v0.23.0/go.mod h1:CKFgDieR+mRhux2Lsu27y0fO304Db0wZe70UKqHu0v8=
 golang.org/x/crypto v0.24.0/go.mod h1:Z1PMYSOR5nyMcyAVAIQSKCDwalqy85Aqn1x3Ws4L5DM=
 golang.org/x/crypto v0.26.0/go.mod h1:GY7jblb9wI+FOo5y8/S2oY4zWP07AkOJ4+jxCqdqn54=
+golang.org/x/crypto v0.27.0/go.mod h1:1Xngt8kV6Dvbssa53Ziq6Eqn0HqbZi5Z6R0ZpwQzt70=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
@@ -1088,6 +1091,8 @@ golang.org/x/mod v0.10.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/mod v0.12.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/mod v0.14.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
 golang.org/x/mod v0.15.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
+golang.org/x/mod v0.21.0 h1:vvrHzRwRfVKSiLrG+d4FMl/Qi4ukBCE6kZlTUkDYRT0=
+golang.org/x/mod v0.21.0/go.mod h1:6SkKJ3Xj0I0BrPOZoBy3bdMptDDU9oJrpohJ3eWZ1fY=
 golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20181023162649-9b4f9f5ad519/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
@@ -1142,6 +1147,8 @@ golang.org/x/net v0.23.0/go.mod h1:JKghWKKOSdJwpW2GEx0Ja7fmaKnMsbu+MWVZTokSYmg=
 golang.org/x/net v0.25.0 h1:d/OCCoBEUq33pjydKrGQhw7IlUPI2Oylr+8qLx49kac=
 golang.org/x/net v0.25.0/go.mod h1:JkAGAh7GEvH74S6FOH42FLoXpXbE/aqXSrIQjXgsiwM=
 golang.org/x/net v0.27.0/go.mod h1:dDi0PyhWNoiUOrAS8uXv/vnScO4wnHQO4mj9fn/RytE=
+golang.org/x/net v0.29.0 h1:5ORfpBpCs4HzDYoodCDBbwHzdR5UrLBZ3sOnUJmFoHo=
+golang.org/x/net v0.29.0/go.mod h1:gLkgy8jTGERgjzMic6DS9+SP0ajcu6Xu3Orq/SpETg0=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
@@ -1265,6 +1272,8 @@ golang.org/x/term v0.14.0/go.mod h1:TySc+nGkYR6qt8km8wUhuFRTVSMIX3XPR58y2lC8vww=
 golang.org/x/term v0.15.0/go.mod h1:BDl952bC7+uMoWR75FIrCDx79TPU9oHkTZ9yRbYOrX0=
 golang.org/x/term v0.20.0 h1:VnkxpohqXaOBYJtBmEppKUG6mXpi+4O6purfc2+sMhw=
 golang.org/x/term v0.20.0/go.mod h1:8UkIAJTvZgivsXaD6/pH6U9ecQzZ45awqEOzuCvwpFY=
+golang.org/x/term v0.24.0 h1:Mh5cbb+Zk2hqqXNO7S1iTjEphVL+jb8ZWaqh/g+JWkM=
+golang.org/x/term v0.24.0/go.mod h1:lOBK/LVxemqiMij05LGJ0tzNr8xlmwBRJ81PX6wVLH8=
 golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
@@ -1344,6 +1353,7 @@ golang.org/x/tools v0.15.0/go.mod h1:hpksKq4dtpQWS1uQ61JkdqWM3LscIS6Slf+VVkm+wQk
 golang.org/x/tools v0.16.1/go.mod h1:kYVVN6I1mBNoB1OX+noeBjbRk4IUEPa7JJ+TJMEooJ0=
 golang.org/x/tools v0.18.0/go.mod h1:GL7B4CwcLLeo59yx/9UWWuNOW1n3VZ4f5axWfML7Lcg=
 golang.org/x/tools v0.23.0/go.mod h1:pnu6ufv6vQkll6szChhK3C3L/ruaIv5eBeztNG8wtsI=
+golang.org/x/tools v0.25.0/go.mod h1:/vtpO8WL1N9cQC3FN5zPqb//fRXskFHbLKk4OW1Q7rg=
 golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2/go.mod h1:K8+ghG5WaK9qNqU5K3HdILfMLy1f3aNYFI/wnl100a8=
 golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028/go.mod h1:NDW/Ps6MPRej6fsCIbMTohpP40sJ/P/vI1MoTEGwX90=
 gomodules.xyz/jsonpatch/v2 v2.3.0/go.mod h1:AH3dM2RI6uoBZxn3LVrfvJ3E0/9dG4cSrbuBJT4moAY=

plugins/admission/CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 1.17.2
+* bumped pluto to 5.20.3
+
 ## 1.17.1
 * bumped pluto to 5.20.2
 

plugins/admission/go.mod

@@ -1,14 +1,14 @@
 module github.com/fairwindsops/insights-plugins/plugins/admission
 
-go 1.22.6
+go 1.22.7
 
 require (
 	github.com/fairwindsops/controller-utils v0.3.4
 	github.com/fairwindsops/insights-plugins/plugins/opa v0.0.0-20240723212203-c2a8403f3449
 	// IMPORTANT: Please also update the const  constant in pkg/pluto/pluto.go
 	// when updating the below Pluto version.
-	github.com/fairwindsops/pluto/v5 v5.20.2
-	github.com/fairwindsops/polaris v0.0.0-20240918200750-8d5247e5017a // 9.4.0
+	github.com/fairwindsops/pluto/v5 v5.20.3
+	github.com/fairwindsops/polaris v0.0.0-20240925151750-be349a885dbb
 	github.com/hashicorp/go-multierror v1.1.1
 	github.com/rogpeppe/go-internal v1.12.0
 	github.com/samber/lo v1.46.0

plugins/admission/go.sum

@@ -36,10 +36,10 @@ github.com/fairwindsops/controller-utils v0.3.4 h1:t1qulL2GVDVUJTIE4icpBy3KnsxFT
 github.com/fairwindsops/controller-utils v0.3.4/go.mod h1:9/hOHX70/LG40RgtFAjtXFiMWEpItqm6Scf+obRFB2Y=
 github.com/fairwindsops/insights-plugins/plugins/opa v0.0.0-20240723212203-c2a8403f3449 h1:KJf58JLQLcNE2ajuaHQsaCUdE30VLQg+TxyyQ3h9o1w=
 github.com/fairwindsops/insights-plugins/plugins/opa v0.0.0-20240723212203-c2a8403f3449/go.mod h1:O7exqY2twgCukf2ATiQuigzoDD/4uhYIc/cM3BpQhIc=
-github.com/fairwindsops/pluto/v5 v5.20.2 h1:V89BOtKM1kVLN7HXogZQH2Tytbd/kpYd2VkJya0i4wQ=
-github.com/fairwindsops/pluto/v5 v5.20.2/go.mod h1:UltMDTOrhza4cq433iRE29cNjdWjhREN50TEeNu2ooo=
-github.com/fairwindsops/polaris v0.0.0-20240918200750-8d5247e5017a h1:c4uyLNuaaSJlrle1KRDRbucni5iOj4JXyjtwTVpTjwk=
-github.com/fairwindsops/polaris v0.0.0-20240918200750-8d5247e5017a/go.mod h1:AOYmfuhipO8bxQyMWN9RGnNb0TCP0zoBNgdts52edm4=
+github.com/fairwindsops/pluto/v5 v5.20.3 h1:VznhtWQL5YETPOJdQro84cyK/Y0eZthwqTZ2smdWxrI=
+github.com/fairwindsops/pluto/v5 v5.20.3/go.mod h1:EyAsOnv93/1zXAuNjnoq/v3Taxz7YNOpmPPhAPEzb/A=
+github.com/fairwindsops/polaris v0.0.0-20240925151750-be349a885dbb h1:Rhg2wAqB+jsVZTseO5SdXuu0sGHaK7+yoABMJ0BQSGg=
+github.com/fairwindsops/polaris v0.0.0-20240925151750-be349a885dbb/go.mod h1:WV1ym0X0lnb7CJN/7/F6t0xfKx+HMiMyNOHtTaaCin4=
 github.com/fatih/color v1.17.0 h1:GlRw1BRJxkpqUCBKzKOw098ed57fEsKeNjpTe3cSjK4=
 github.com/fatih/color v1.17.0/go.mod h1:YZ7TlrGPkiz6ku9fK3TLD/pl3CpsiFyu8N92HLgmosI=
 github.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg=

plugins/admission/pkg/pluto/pluto.go

@@ -15,7 +15,7 @@ import (
 	"github.com/fairwindsops/insights-plugins/plugins/admission/pkg/models"
 )
 
-const plutoVersion = "5.20.2"
+const plutoVersion = "5.20.3"
 
 // ProcessPluto processes an object with Pluto, using the user-specified Pluto
 // target-versions to determine API deprecations and removals.

plugins/admission/version.txt

@@ -1 +1 @@
-1.17.1
+1.17.2

plugins/ci/CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 5.7.5
+- Fixing vulnerabilities
+
 ## 5.7.4
 - Bumped pluto to 5.20.2
 

plugins/ci/Dockerfile

@@ -1,10 +1,10 @@
 FROM alpine:3.20 AS downloader
 ARG TARGETARCH
 ARG TARGETOS
-ENV tfsecVersion=1.28.9
-ENV trivyVersion=0.54.1
-ENV polarisVersion=9.4.0
-ENV plutoVersion=5.20.2
+ENV tfsecVersion=1.28.10
+ENV trivyVersion=0.55.2
+ENV polarisVersion=9.4.1
+ENV plutoVersion=5.20.3
 ENV helmVersion=3.15.4
 
 # Bash and openssl are  required by the Helm script.

plugins/ci/go.mod

@@ -1,6 +1,6 @@
 module github.com/fairwindsops/insights-plugins/plugins/ci
 
-go 1.22.6
+go 1.22.7
 
 require (
 	github.com/fairwindsops/insights-plugins/plugins/opa v0.0.0-20240917200815-3ce13b8faae3

plugins/ci/version.txt

@@ -1 +1 @@
-5.7.4
+5.7.5

plugins/cloud-costs/CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 0.3.8
+* upgraded google cloud sdk
+
 ## 0.3.7
 * upgraded goreleaser to v2
 

plugins/cloud-costs/Dockerfile

@@ -8,7 +8,7 @@ RUN apk update && apk upgrade
 RUN apk add jq bash curl moreutils coreutils
 RUN apk add unzip
 
-ENV google_cloud_sdk_version=491.0.0 
+ENV google_cloud_sdk_version=494.0.0
 
 RUN apk add python3
 RUN apk add --no-cache aws-cli
@@ -23,7 +23,9 @@ RUN if [ "${TARGETARCH}" = "arm64" ]; then \
     ./google-cloud-sdk/install.sh && \
     ./google-cloud-sdk/bin/gcloud components install bq && \
     rm -rf /google-cloud-sdk/lib/googlecloudsdk/third_party /google-cloud-sdk/platform/gsutil/third_party /google-cloud-sdk/lib/googlecloudsdk/generated_clients/apis/appengine && \
-    rm -rf google-cloud-sdk.tar.gz
+    rm -rf google-cloud-sdk.tar.gz && \
+    rm -rf /google-cloud-sdk/bin/gcloud-crc32c
+
 
 COPY cloud-costs.sh cloud-costs.sh
 

plugins/cloud-costs/version.txt

@@ -1 +1 @@
-0.3.7
+0.3.8

plugins/kubectl/CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 0.20.7
+* bumped kubectl version
+
 ## 0.20.6
 * upgraded goreleaser to v2
 

plugins/kubectl/Dockerfile

@@ -3,7 +3,10 @@ ARG TARGETARCH
 ARG TARGETOS
 RUN apk -U upgrade
 RUN apk add curl
-RUN curl -LO https://storage.googleapis.com/kubernetes-release/release/v1.19.6/bin/${TARGETOS}/${TARGETARCH}/kubectl && chmod +x ./kubectl && mv ./kubectl /usr/local/bin/kubectl
+ENV kubectlVersion=1.31.0
+RUN curl -LO https://dl.k8s.io/release/$kubectlVersion/bin/${TARGETOS}/${TARGETARCH}/kubectl
+RUN chmod +x ./kubectl && mv ./kubectl /usr/local/bin/kubectl
+
 USER 10010
 ENTRYPOINT [ "kubectl" ]
 CMD [ "--help" ]

plugins/kubectl/version.txt

@@ -1 +1 @@
-0.20.6
+0.20.7

plugins/kubesec/CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 1.4.10
+* fixing vulberabilities
+
 ## 1.4.9
 * upgraded goreleaser to v2
 

plugins/kubesec/Dockerfile

@@ -8,12 +8,12 @@ RUN echo "TODO: this line just removes a cached layer"
 RUN apk update && apk upgrade
 RUN apk add curl python3 jq yq tar go bash py3-pip
 
-ENV kubectlVersion=1.29.0
+ENV kubectlVersion=1.31.0
 RUN curl -LO https://dl.k8s.io/release/$kubectlVersion/bin/${TARGETOS}/${TARGETARCH}/kubectl
 RUN chmod +x ./kubectl && mv ./kubectl /usr/local/bin/kubectl
 
 ENV GOPATH=/home/ubuntu/go/
-RUN curl -L "https://github.com/controlplaneio/kubesec/releases/download/v2.11.5/kubesec_${TARGETOS}_${TARGETARCH}.tar.gz" > kubesec.tar.gz && tar -xvf kubesec.tar.gz && mv kubesec /usr/bin/ && rm kubesec.tar.gz
+RUN curl -L "https://github.com/controlplaneio/kubesec/releases/download/v2.14.1/kubesec_${TARGETOS}_${TARGETARCH}.tar.gz" > kubesec.tar.gz && tar -xvf kubesec.tar.gz && mv kubesec /usr/bin/ && rm kubesec.tar.gz
 
 COPY main.sh .
 

plugins/kubesec/version.txt

@@ -1 +1 @@
-1.4.9
+1.4.10

plugins/kyverno/CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 0.3.2
+* upgraded go to 1.22.7
+
 ## 0.3.1
 * upgraded goreleaser to v2
 

plugins/kyverno/go.mod

@@ -1,6 +1,6 @@
 module github.com/fairwindsops/insights-plugins/plugins/kyverno
 
-go 1.22.6
+go 1.22.7
 
 require (
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect

plugins/kyverno/version.txt

@@ -1 +1 @@
-0.3.1
+0.3.2

plugins/opa/CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 2.5.2
+* upgraded go to 1.22.7
+
 ## 2.5.1
 * upgraded goreleaser to v2
 

plugins/opa/go.mod

@@ -1,6 +1,6 @@
 module github.com/fairwindsops/insights-plugins/plugins/opa
 
-go 1.22.6
+go 1.22.7
 
 require (
 	github.com/hashicorp/go-multierror v1.1.1

plugins/opa/version.txt

@@ -1 +1 @@
-2.5.1
+2.5.2

plugins/prometheus/CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 1.5.3
+* upgraded go to 1.22.7
+
 ## 1.5.2
 * upgraded goreleaser to v2
 

plugins/prometheus/go.mod

@@ -1,6 +1,6 @@
 module github.com/fairwindsops/insights-plugins/plugins/prometheus
 
-go 1.22.6
+go 1.22.7
 
 require (
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc

plugins/prometheus/version.txt

@@ -1 +1 @@
-1.5.2
+1.5.3

plugins/rbac-reporter/CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 1.3.20
+* upgraded go to 1.22.7
+
 ## 1.3.19
 * upgraded goreleaser to v2
 

plugins/rbac-reporter/go.mod

@@ -1,6 +1,6 @@
 module github.com/fairwindsops/insights-plugins/plugins/rbac-reporter
 
-go 1.22.6
+go 1.22.7
 
 require (
 	github.com/sirupsen/logrus v1.9.3

plugins/rbac-reporter/version.txt

@@ -1 +1 @@
-1.3.19
+1.3.20

plugins/right-sizer/CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 0.5.9
+* upgraded go to 1.22.7
+
 ## 0.5.8
 * upgraded goreleaser to v2
 

plugins/right-sizer/go.mod

@@ -1,6 +1,6 @@
 module github.com/fairwindsops/insights-plugins/plugins/right-sizer
 
-go 1.22.6
+go 1.22.7
 
 require (
 	github.com/fairwindsops/controller-utils v0.3.4

plugins/right-sizer/version.txt

@@ -1 +1 @@
-0.5.8
+0.5.9

plugins/trivy/CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 0.30.2
+* fixing vulberabilities
+
 ## 0.30.1
 * upgraded goreleaser to v2
 

plugins/trivy/Dockerfile

@@ -1,10 +1,10 @@
 FROM alpine:3.20 AS downloader
 ARG TARGETARCH
 ARG TARGETOS
-ENV trivyVersion=0.54.1
+ENV trivyVersion=0.55.2
 RUN apk update && apk add curl
 
-ENV kubectlVersion=1.29.0
+ENV kubectlVersion=1.31.0
 RUN curl -LO https://dl.k8s.io/release/$kubectlVersion/bin/${TARGETOS}/${TARGETARCH}/kubectl
 RUN chmod +x ./kubectl && mv ./kubectl /usr/local/bin/kubectl
 

plugins/trivy/go.mod

@@ -1,6 +1,6 @@
 module github.com/fairwindsops/insights-plugins/plugins/trivy
 
-go 1.22.6
+go 1.22.7
 
 require (
 	github.com/Masterminds/semver/v3 v3.3.0

plugins/trivy/version.txt

@@ -1 +1 @@
-0.30.1
+0.30.2

plugins/uploader/CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 0.5.7
+* fixing vulberabilities
+
 ## 0.5.6
 * upgraded goreleaser to v2
 

plugins/uploader/Dockerfile

@@ -6,7 +6,7 @@ RUN apk -U upgrade
 RUN apk --no-cache add bash ca-certificates curl
 
 # curl -L -s https://dl.k8s.io/release/stable.txt
-ENV kubectlVersion=v1.29.0
+ENV kubectlVersion=1.31.0
 RUN curl -LO https://dl.k8s.io/release/$kubectlVersion/bin/${TARGETOS}/${TARGETARCH}/kubectl
 RUN chmod +x ./kubectl && mv ./kubectl /usr/local/bin/kubectl
 

plugins/uploader/version.txt

@@ -1 +1 @@
-0.5.6
+0.5.7

plugins/workloads/CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 2.6.11
+* upgraded go to 1.22.7
+
 ## 2.6.10
 * upgraded goreleaser to v2