Update docker-credential-gcr to use /v2 #3017
Labels
area/security
dependencies
Pull requests that update a dependency file
kind/security
priority/p0
Highest priority. Break user flow. We are actively looking at delivering it.
The docker-credential-gcr
go
package is outdated and pinned to a version that's now roughly 8 months old (v2.1.8). In this code comment, there's a linked issue regarding the use of/v2
of the go package that's since been resolved.The
docker-credential-gcr
repo's docs mention usingIt'd seem prudent to update to this for clarity. The latest of
docker-credential-gcr
is currently v2.1.22.https://github.com/GoogleCloudPlatform/docker-credential-gcr/releases/tag/v2.1.22
It's also worth mentioning that we're currently unable to auth to GAR using kaniko's installed version of
docker-credential-gcr
. If we exec into a kaniko container and overwrite thedocker-credential-gcr
binary with the latest version, our issue goes away.The text was updated successfully, but these errors were encountered: