fix: fix main vulnerabilities#1967
Conversation
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates the gke-distroless base image tags and digests across several Dockerfiles and the global Helm values. The review feedback recommends wrapping the updated tag in charts/values.global.yaml in double quotes to prevent YAML parsers from treating it as a number, adhering to the file's documented guidelines.
Signed-off-by: bwplotka <bwplotka@gmail.com>
bwplotka
force-pushed
the
bwplotka/main-gmpctl-vulnfix
branch
2 times, most recently
from
c7bb2d2 to
ed36e4d
Compare
Signed-off-by: bwplotka <bwplotka@google.com>
| persist-credentials: false | ||
| - uses: actions/setup-go@v6 | ||
| with: | ||
| go-version: '1.25' |
There was a problem hiding this comment.
Why would we want to do this?
There was a problem hiding this comment.
https://github.com/GoogleCloudPlatform/prometheus-engine/actions/runs/28031355288/job/82972613566 - there might be better way to do this
There was a problem hiding this comment.
I think go-version: stable should use the latest stable release.
https://github.com/actions/setup-go#supported-version-syntax
Signed-off-by: bwplotka <bwplotka@google.com>
2 participants
Updating Go and image vulnerabilities using