fix(cve): docker & buildkit

[kemingy]

interface changes:

• prune match buildx
  • removed keep-storage
  • added max-used-mb, min-free-mb, and reserved-mb

Copilot reviewed 6 out of 19 changed files in this pull request and generated no comments.

Files not reviewed (13)

• go.mod: Language not supported
• pkg/autocomplete/zsh.go: Evaluated as low risk
• pkg/envd/envdserver.go: Evaluated as low risk
• pkg/app/image_prune.go: Evaluated as low risk
• pkg/envd/engine.go: Evaluated as low risk
• pkg/driver/nerdctl/nerdctl.go: Evaluated as low risk
• pkg/envd/docker.go: Evaluated as low risk
• pkg/driver/client.go: Evaluated as low risk
• pkg/buildkitd/mock/mock.go: Evaluated as low risk
• pkg/types/envd.go: Evaluated as low risk
• pkg/builder/build.go: Evaluated as low risk
• pkg/app/image_prune_test.go: Evaluated as low risk
• pkg/buildkitd/buildkitd.go: Evaluated as low risk

Comments suppressed due to low confidence (2)

pkg/app/debug_llb.go:170

• The new implementation within the attr function should be reviewed to ensure it covers all the scenarios previously handled by generateExecNode, such as handling mounts, user, cwd, and env.

return strings.Join(op.Exec.Meta.Args, " "), "box"

pkg/app/prune.go:73

• Ensure that the new parameters 'max-used-mb', 'min-free-mb', and 'reserved-mb' are covered by tests.

maxUsed := clicontext.Float64("max-used-mb")