Skip to content

fix: bump Go builder to 1.26.6 and baseline CVE-2026-46600 for oCIS 8.1 #37

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
DeepDiver1975 merged 2 commits into from
Aug 17, 2026
Merged

fix: bump Go builder to 1.26.6 and baseline CVE-2026-46600 for oCIS 8.1 #37

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
fa5f635
fix: ignore CVE-2026-46600 in the oCIS 8.1 Trivy baseline
DeepDiver1975 Aug 17, 2026
dda4751
fix: bump Go builder to 1.26.6 to clear 8 HIGH stdlib CVEs
DeepDiver1975 Aug 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions v8/8.1/.trivyignore
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,3 +8,7 @@ GHSA-hrxh-6v49-42gf exp:2026-10-31

# github.com/go-git/go-git/v5 v5.19.1 (fixed in 5.19.2) — fixed in oCIS 8.2.0
CVE-2026-71556 exp:2026-10-31

# golang.org/x/net v0.55.0 (fixed in 0.56.0) — only the 8.1 line is affected;
# 8.0.7 and 8.2.0 already ship v0.57.0
CVE-2026-46600 exp:2026-10-31
2 changes: 1 addition & 1 deletion v8/Dockerfile.multiarch
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,7 @@ RUN if [ -f ../../web/package.json ]; then \
fi


FROM docker.io/golang:1.26.5-alpine3.23@sha256:622e56dbc11a8cfe87cafa2331e9a201877271cbff918af53d3be315f3da88cc AS go-builder
FROM docker.io/golang:1.26.6-alpine3.23@sha256:e57c41c1d5864341031181b0db34b9a537bb5773eb6428e4e5bdaea0f9135406 AS go-builder

ARG VERSION="8.0.1"
ARG TARGETARCH
Expand Down