-
-
Notifications
You must be signed in to change notification settings - Fork 300
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(docker): security upgrade grafana/grafana from 8.5.25 to 8.5.27 #5924
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE315-NCURSES-5606598 - https://snyk.io/vuln/SNYK-ALPINE315-NCURSES-5606598 - https://snyk.io/vuln/SNYK-ALPINE315-OPENSSL-5661569 - https://snyk.io/vuln/SNYK-ALPINE315-OPENSSL-5661569 - https://snyk.io/vuln/SNYK-ALPINE315-OPENSSL-5788364
Performance Report✔️ no performance regression detected Full benchmark results
|
@nazarhussain did we agree to disable Snyk? If yes, please revoke permissions to the app |
@dapplion The Synk was disabled for the code, but we kept it for Docker images. I believe we currently don't have any alternative for docker. Do you want me to disable it for the Docker as well? |
hmm that's useful then yes. but the Dockerfiles inside |
@dapplion Yes we can configure that but I think even if those docker files are for testing purposes, we should upgrade those docker images to the latests ones regularly or at least in case of security upgrade like this. |
Okay yes that's sounds sensible |
🎉 This PR is included in v1.12.0 🎉 |
This PR was automatically created by Snyk using the credentials of a real user.
Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.
Changes included in this PR
We recommend upgrading to
grafana/grafana:8.5.27
, as this image has only 3 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.Some of the most important vulnerabilities in your base image include:
SNYK-ALPINE315-NCURSES-5606598
SNYK-ALPINE315-NCURSES-5606598
SNYK-ALPINE315-OPENSSL-5661569
SNYK-ALPINE315-OPENSSL-5661569
SNYK-ALPINE315-OPENSSL-5788364
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Allocation of Resources Without Limits or Throttling
🦉 Inefficient Regular Expression Complexity