chore(KONFLUX-6210): Update CPE label and naming for release 1.7#188
Closed
clyang82 wants to merge 105 commits into
Closed
chore(KONFLUX-6210): Update CPE label and naming for release 1.7#188clyang82 wants to merge 105 commits into
clyang82 wants to merge 105 commits into
Conversation
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
* Update Konflux references Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com> * Migration from 0.1 to 0.2 Signed-off-by: clyang82 <chuyang@redhat.com> --------- Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com> Signed-off-by: clyang82 <chuyang@redhat.com> Co-authored-by: red-hat-konflux[bot] <126015336+red-hat-konflux[bot]@users.noreply.github.com> Co-authored-by: clyang82 <chuyang@redhat.com>
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
…mcr.microsoft.com-azure-sql-edge-1.x Update mcr.microsoft.com/azure-sql-edge Docker tag to v1.0.7
…ubuntu-14.x Update ubuntu Docker tag to v14.04.5
…node-20.x Update Node.js to v20
…alpine-3.x Update alpine Docker tag to v3.20.3
…centos-6.x Update centos Docker tag to v6.10
…golang-1.x Update golang Docker tag
…mysql-8.x Update mysql Docker tag to v8.4.2
…nginx-1.x Update nginx Docker tag to v1.27.1
…postgres-11.x Update postgres Docker tag to v11.22
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
chore(deps): update konflux references
…ubuntu-24.x chore(deps): update ubuntu docker tag to v24
…postgres-16.x chore(deps): update postgres docker tag to v16
* Red Hat Konflux update glo-grafana-globalhub-1-6 Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev> * remove 1.5 and update 1.6 Signed-off-by: clyang82 <chuyang@redhat.com> --------- Signed-off-by: clyang82 <chuyang@redhat.com> Co-authored-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev> Co-authored-by: clyang82 <chuyang@redhat.com>
Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
…balhub-1-6 Red Hat Konflux purge glo-grafana-globalhub-1-6
* Red Hat Konflux update glo-grafana-globalhub-1-6 Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev> * Manually update Signed-off-by: clyang82 <chuyang@redhat.com> --------- Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev> Signed-off-by: clyang82 <chuyang@redhat.com> Co-authored-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev> Co-authored-by: clyang82 <chuyang@redhat.com>
Signed-off-by: clyang82 <chuyang@redhat.com>
Add back nudge
chore(config): migrate renovate config
Enable slack notifications for the glo-grafana component build pipeline by adding required parameters including webhook configuration and member ID for notification alerts on pipeline failures. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
…ation Add slack notification configuration for glo-grafana release 1.6
…ase 1.6 This change updates the Tekton pipeline configuration to use slack-group-id instead of slack-member-id parameter for Slack notifications. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com> Signed-off-by: clyang82 <chuyang@redhat.com>
…ber-id-with-slack-group-id Replace slack-member-id with slack-group-id in .tekton files for release 1.6
- Rename and update pull-request pipeline for globalhub-1-7 - Rename and update push pipeline for globalhub-1-7 - Update branch references to release-1.7 Corresponds to ACM release-2.16 / Global Hub v1.7.0 Signed-off-by: myan <myan@redhat.com>
Update release-1.7 grafana configuration
…64-to-release-1.7 [release-1.7] Change base image to ubi-minimal for container
Signed-off-by: clyang82 <chuyang@redhat.com>
Signed-off-by: clyang82 <chuyang@redhat.com>
Upgrade golang to 1.25.3
) * Fix CVE-2025-64756 and CVE-2025-66031: Upgrade glob and node-forge This commit addresses two security vulnerabilities in dependencies: 1. CVE-2025-64756 (ACM-27068): glob command injection vulnerability - Upgraded glob from 10.4.1 to 11.1.0 - Vulnerability allowed arbitrary command execution via malicious filenames - Fixed by upgrading to glob 11.1.0+ 2. CVE-2025-66031 (ACM-27062): node-forge ASN.1 unbounded recursion - Upgraded node-forge from ^1.3.1 to ^1.3.2 - Vulnerability could cause DoS via stack exhaustion - Fixed by upgrading to node-forge 1.3.2+ Changes: - Updated package.json with new dependency versions - Updated yarn.lock with resolved dependencies Fixes: ACM-27068, ACM-27062 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> Signed-off-by: clyang82 <chuyang@redhat.com> * Update build artifacts after dependency upgrades This commit updates the build artifacts after upgrading glob and node-forge dependencies for CVE fixes (ACM-27068, ACM-27062). Changes: - Rebuilt AngularApp bundle with new hash - Rebuilt runtime bundle with new hash - Updated assets manifest 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> Signed-off-by: clyang82 <chuyang@redhat.com> * rerun in linux --------- Signed-off-by: clyang82 <chuyang@redhat.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
* Fix CVE-2024-25621: Upgrade containerd to v1.7.29 This commit fixes CVE-2024-25621, a local privilege escalation vulnerability in containerd versions up to 1.7.28. The issue involved overly broad default permissions for directory paths in containerd. Changes: - Added replace directive to force containerd v1.7.29 - Updated go.mod and go.sum with new containerd version - Also updated transitive dependencies (go-jose, golang.org/x/crypto) Fixes: ACM-27214 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> Signed-off-by: clyang82 <chuyang@redhat.com> * Fix k8s.io dependency resolution for go work vendor Add replace directives in go.mod for k8s.io components to resolve v0.0.0 dependency issues that prevented go work vendor from running successfully. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> --------- Signed-off-by: clyang82 <chuyang@redhat.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
For https://issues.redhat.com/browse/KONFLUX-6210, clair needs access to a name and cpe label that it can use to look up the image in VEX statements. This commit updates: - Component name from multicluster-global-hub-grafana to multicluster-globalhub-grafana-rhel9 - Image name from multicluster-global-hub/multicluster-global-hub-grafana to multicluster-globalhub/multicluster-globalhub-grafana-rhel9 - Version from release-1.5 to release-1.7 - Added CPE label: cpe:/a:redhat:multicluster_globalhub:1.7::el9 See also release-engineering/rhtap-ec-policy#149 Signed-off-by: Chunlin Yang <chuyang@redhat.com> Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> Signed-off-by: clyang82 <chuyang@redhat.com>
|
PR needs rebase. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: clyang82 The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
Author
|
close it in favor of #190 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
cpe:/a:redhat:multicluster_globalhub:1.7::el9for KONFLUX-6210 compliancemulticluster-globalhub-grafana-rhel9multicluster-globalhub/multicluster-globalhub-grafana-rhel9release-1.5torelease-1.7Context
This change addresses KONFLUX-6210, which requires Clair to have access to name and CPE labels for VEX statement lookups.
See also: release-engineering/rhtap-ec-policy#149
🤖 Generated with Claude Code