updated trivy scan results

suxess-it · Jan 7, 2025 · a3bec71 · a3bec71
1 parent d8591aa
commit a3bec71
Show file tree

Hide file tree

Showing 6 changed files with 41 additions and 13 deletions.
diff --git a/trivy-reports/report-argocd_argocd_v2.13.2.md b/trivy-reports/report-argocd_argocd_v2.13.2.md
@@ -3,7 +3,7 @@
 <h4>No Vulnerabilities found</h4>
 <h4>No Misconfigurations found</h4>
 <h3>Target <code>usr/local/bin/argocd</code></h3>
-<h4>Vulnerabilities (3)</h4>
+<h4>Vulnerabilities (4)</h4>
 <table>
     <tr>
         <th>Package</th>
@@ -12,6 +12,13 @@
         <th>Installed Version</th>
         <th>Fixed Version</th>
     </tr>
+    <tr>
+        <td><code>github.com/go-git/go-git/v5</code></td>
+        <td>CVE-2025-21613</td>
+        <td>CRITICAL</td>
+        <td>v5.12.0</td>
+        <td>5.13.0</td>
+    </tr>
     <tr>
         <td><code>github.com/go-git/go-git/v5</code></td>
         <td>CVE-2025-21614</td>

diff --git a/trivy-reports/report-backstage_sx-backstage_v1.32.5.md b/trivy-reports/report-backstage_sx-backstage_v1.32.5.md
@@ -1,6 +1,6 @@
 
 <h3>Target <code>ghcr.io/suxess-it/sx-backstage:v1.32.5 (debian 12.7)</code></h3>
-<h4>Vulnerabilities (114)</h4>
+<h4>Vulnerabilities (113)</h4>
 <table>
     <tr>
         <th>Package</th>
@@ -338,13 +338,6 @@
         <td>6.1.112-1</td>
         <td>6.1.115-1</td>
     </tr>
-    <tr>
-        <td><code>linux-libc-dev</code></td>
-        <td>CVE-2024-49967</td>
-        <td>HIGH</td>
-        <td>6.1.112-1</td>
-        <td>6.1.115-1</td>
-    </tr>
     <tr>
         <td><code>linux-libc-dev</code></td>
         <td>CVE-2024-49969</td>

diff --git a/trivy-reports/report-k8s-monitoring_alloy_v1.5.1.md b/trivy-reports/report-k8s-monitoring_alloy_v1.5.1.md
@@ -3,7 +3,7 @@
 <h4>No Vulnerabilities found</h4>
 <h4>No Misconfigurations found</h4>
 <h3>Target <code>usr/bin/alloy</code></h3>
-<h4>Vulnerabilities (3)</h4>
+<h4>Vulnerabilities (4)</h4>
 <table>
     <tr>
         <th>Package</th>
@@ -12,6 +12,13 @@
         <th>Installed Version</th>
         <th>Fixed Version</th>
     </tr>
+    <tr>
+        <td><code>github.com/go-git/go-git/v5</code></td>
+        <td>CVE-2025-21613</td>
+        <td>CRITICAL</td>
+        <td>v5.11.0</td>
+        <td>5.13.0</td>
+    </tr>
     <tr>
         <td><code>github.com/go-git/go-git/v5</code></td>
         <td>CVE-2025-21614</td>

diff --git a/trivy-reports/report-kargo_kargo_v1.1.2.md b/trivy-reports/report-kargo_kargo_v1.1.2.md
@@ -32,7 +32,7 @@
 </table>
 <h4>No Misconfigurations found</h4>
 <h3>Target <code>usr/local/bin/kargo</code></h3>
-<h4>Vulnerabilities (3)</h4>
+<h4>Vulnerabilities (4)</h4>
 <table>
     <tr>
         <th>Package</th>
@@ -41,6 +41,13 @@
         <th>Installed Version</th>
         <th>Fixed Version</th>
     </tr>
+    <tr>
+        <td><code>github.com/go-git/go-git/v5</code></td>
+        <td>CVE-2025-21613</td>
+        <td>CRITICAL</td>
+        <td>v5.12.0</td>
+        <td>5.13.0</td>
+    </tr>
     <tr>
         <td><code>github.com/go-git/go-git/v5</code></td>
         <td>CVE-2025-21614</td>

diff --git a/trivy-reports/report-kyverno_kyverno-cli_v1.13.2.md b/trivy-reports/report-kyverno_kyverno-cli_v1.13.2.md
@@ -3,7 +3,7 @@
 <h4>No Vulnerabilities found</h4>
 <h4>No Misconfigurations found</h4>
 <h3>Target <code>ko-app/kubectl-kyverno</code></h3>
-<h4>Vulnerabilities (3)</h4>
+<h4>Vulnerabilities (4)</h4>
 <table>
     <tr>
         <th>Package</th>
@@ -12,6 +12,13 @@
         <th>Installed Version</th>
         <th>Fixed Version</th>
     </tr>
+    <tr>
+        <td><code>github.com/go-git/go-git/v5</code></td>
+        <td>CVE-2025-21613</td>
+        <td>CRITICAL</td>
+        <td>v5.12.0</td>
+        <td>5.13.0</td>
+    </tr>
     <tr>
         <td><code>github.com/go-git/go-git/v5</code></td>
         <td>CVE-2025-21614</td>

diff --git a/trivy-reports/report-trivy_trivy-operator_0.23.0.md b/trivy-reports/report-trivy_trivy-operator_0.23.0.md
@@ -3,7 +3,7 @@
 <h4>No Vulnerabilities found</h4>
 <h4>No Misconfigurations found</h4>
 <h3>Target <code>usr/local/bin/trivy-operator</code></h3>
-<h4>Vulnerabilities (3)</h4>
+<h4>Vulnerabilities (4)</h4>
 <table>
     <tr>
         <th>Package</th>
@@ -12,6 +12,13 @@
         <th>Installed Version</th>
         <th>Fixed Version</th>
     </tr>
+    <tr>
+        <td><code>github.com/go-git/go-git/v5</code></td>
+        <td>CVE-2025-21613</td>
+        <td>CRITICAL</td>
+        <td>v5.12.0</td>
+        <td>5.13.0</td>
+    </tr>
     <tr>
         <td><code>github.com/go-git/go-git/v5</code></td>
         <td>CVE-2025-21614</td>