diff --git a/v8/8.1/.trivyignore b/v8/8.1/.trivyignore index b1b60f7..4ef1ea4 100644 --- a/v8/8.1/.trivyignore +++ b/v8/8.1/.trivyignore @@ -8,3 +8,7 @@ GHSA-hrxh-6v49-42gf exp:2026-10-31 # github.com/go-git/go-git/v5 v5.19.1 (fixed in 5.19.2) — fixed in oCIS 8.2.0 CVE-2026-71556 exp:2026-10-31 + +# golang.org/x/net v0.55.0 (fixed in 0.56.0) — only the 8.1 line is affected; +# 8.0.7 and 8.2.0 already ship v0.57.0 +CVE-2026-46600 exp:2026-10-31 diff --git a/v8/Dockerfile.multiarch b/v8/Dockerfile.multiarch index d6ba925..2f3b804 100644 --- a/v8/Dockerfile.multiarch +++ b/v8/Dockerfile.multiarch @@ -47,7 +47,7 @@ RUN if [ -f ../../web/package.json ]; then \ fi -FROM docker.io/golang:1.26.5-alpine3.23@sha256:622e56dbc11a8cfe87cafa2331e9a201877271cbff918af53d3be315f3da88cc AS go-builder +FROM docker.io/golang:1.26.6-alpine3.23@sha256:e57c41c1d5864341031181b0db34b9a537bb5773eb6428e4e5bdaea0f9135406 AS go-builder ARG VERSION="8.0.1" ARG TARGETARCH