mirrors/velero
1
0
Fork 0
mirror of https://github.com/vmware-tanzu/velero.git synced 2026-09-20 15:04:17 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bump base images and Go version to fix CVEs

Browse Source 
Bumps golang to 1.26.7 and paketobuildpacks/run-jammy-tiny to 0.2.165
to resolve OS and Go vulnerabilities reported by trivy image scan.
Bump golangci-lint that supports Golang 1.26.

Co-authored-by: Cursor <cursoragent@cursor.com>
Signed-off-by: Xun Jiang <xun.jiang@broadcom.com>
This commit is contained in:
Xun Jiang
2026-08-27 17:32:43 +08:00
co-authored by Cursor
parent 2b8da49df1
commit 32db614154
6 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hack/build-image/Dockerfile
+2 -2
View File
@@ -12,7 +12,7 @@
# See the License for the specific language governing permissions and
# limitations under the License.
FROM --platform=$TARGETPLATFORM golang:1.25.11-trixie
FROM --platform=$TARGETPLATFORM golang:1.26.7-trixie
ARG GOPROXY
@@ -98,7 +98,7 @@ RUN ARCH=$(go env GOARCH) && \
# get golangci-lint
# Use "go install" so the download goes through GOPROXY instead of the GitHub
# release API/CDN, which has been returning intermittent/persistent HTTP 504s.
RUN go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.5.0
RUN go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.13.1
# install kubectl
RUN curl -LO https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/linux/$(go env GOARCH)/kubectl