diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 1162a71..790b7b4 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -37,7 +37,7 @@ jobs: - name: Build and Push id: build_and_push - uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 # v6.7.0 + uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0 with: push: true tags: ghcr.io/${{ github.repository }}:${{ github.ref_name }} diff --git a/.trivyignore b/.trivyignore index e006949..7405e13 100644 --- a/.trivyignore +++ b/.trivyignore @@ -5,3 +5,7 @@ CVE-2022-25883 # .NET CVE-2019-0980 CVE-2019-0981 + +# In the Linux kernel, the following vulnerability has been resolved: +# exec: Fix ToCToU between perm check and set-uid/gid usage +CVE-2024-43882