Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix CVE for trivy scan #5642

Merged
merged 1 commit into from
Nov 29, 2022
Merged

Fix CVE for trivy scan #5642

merged 1 commit into from
Nov 29, 2022

Conversation

qiuming-best
Copy link
Contributor

@qiuming-best qiuming-best commented Nov 29, 2022 •
edited
Loading

Signed-off-by: Ming [email protected]

Thank you for contributing to Velero!

Please add a summary of your change

Does your change fix a particular issue?

Fixes #(issue)
Fix CVE scanned by Trivy:

  • bump up restic to 0.14.0
  • bump up golang lib version
  • rollback not to self compile restic

Please indicate you've done the following:

  • Accepted the DCO. Commits without the DCO will delay acceptance.
  • Created a changelog file or added /kind changelog-not-required as a comment on this pull request.
  • Updated the corresponding documentation in site/content/docs/main.

@github-actions github-actions bot added Dependencies Pull requests that update a dependency file and removed has-changelog labels Nov 29, 2022
@qiuming-best qiuming-best marked this pull request as draft November 29, 2022 07:20
@qiuming-best qiuming-best marked this pull request as ready for review November 29, 2022 07:26
@qiuming-best qiuming-best merged commit 81fbb85 into vmware-tanzu:release-1.9 Nov 29, 2022
@yanji09 yanji09 added this to the v1.9.4 milestone Dec 5, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@Lyndon-Li Lyndon-Li Lyndon-Li approved these changes

@danfengliu danfengliu danfengliu approved these changes

@blackpiglet blackpiglet Awaiting requested review from blackpiglet

@sseago sseago Awaiting requested review from sseago

@reasonerjt reasonerjt Awaiting requested review from reasonerjt

@ywk253100 ywk253100 Awaiting requested review from ywk253100

@shubham-pampattiwar shubham-pampattiwar Awaiting requested review from shubham-pampattiwar

Assignees

@qiuming-best qiuming-best

Labels
Dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
v1.9.4
Development

Successfully merging this pull request may close these issues.
4 participants
@qiuming-best @danfengliu @Lyndon-Li @yanji09