Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updating AWS_IAM_AUTHENTICATOR & GOOGLE_CLOUD_SDK - CVE fix #74

Merged
merged 1 commit into from
Jan 4, 2024
Merged

Updating AWS_IAM_AUTHENTICATOR & GOOGLE_CLOUD_SDK - CVE fix #74

merged 1 commit into from
Jan 4, 2024

Conversation

aman-agrawal
Copy link
Collaborator

@aman-agrawal aman-agrawal commented Jan 3, 2024

Summary

Project Jira : Ref and other related Jiras
Project Doc : NA

Issue/Feature : Vulnerabilities in go pckgs
Solution : Updating AWS_IAM_AUTHENTICATOR & GOOGLE_CLOUD_SDK versions to latest

How changes are verified

  1. Build success, No new TCs failing
  2. Created new dockerImg, deployed on ns=testframe, verified changes by running 3-4 pipelines, watched the logs and didnt find any errors.
    DockerImg for ref : aman1603/clouddriver:3jan2
  3. Scanned the dockerImg using trivy on local ubuntu system & found that mentioned CVEs are resolved/fixed.

Documentation Updates

Do we need to update dashboards? No
Do we need to update SOP, new hire wiki or other documents? No

Rollback, Deployment Details

Can this change be rolled back automatically without any issue? Yes
Is this a backwards-compatible change in your opinion ? Yes
Pre deployment steps : @yugaa22 pls update github actions accordingly
Post deployment steps : QA need to test more rigorously.

@sanopsmx sanopsmx merged commit fba332b into OpsMx:OES-1.30.1 Jan 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants