Issue
The Dockerfile uses golang:1.19 as the builder image, which is end-of-life and carries known CVEs. There is also no way to build the Docker image directly from the repo — make docker-snapshot goes through goreleaser which creates a limited build context, making it unsuitable for in-container compilation workflows.
Additionally, kubeclient.go silently ignores the error from ClientConfig(), which can lead to a nil-pointer panic on the next line.
Proposed fix
- Bump builder image to
golang:1.23
- Add a
docker-build Makefile target (docker build from repo root)
- Update deprecated goreleaser
--rm-dist to --clean
- Add missing error check in
kubeclient.go
- Update README Docker instructions accordingly
Issue
The Dockerfile uses
golang:1.19as the builder image, which is end-of-life and carries known CVEs. There is also no way to build the Docker image directly from the repo —make docker-snapshotgoes through goreleaser which creates a limited build context, making it unsuitable for in-container compilation workflows.Additionally,
kubeclient.gosilently ignores the error fromClientConfig(), which can lead to a nil-pointer panic on the next line.Proposed fix
golang:1.23docker-buildMakefile target (docker buildfrom repo root)--rm-distto--cleankubeclient.go