From 8817f094498335a7ff156fcae0246b1c70c5ff64 Mon Sep 17 00:00:00 2001 From: OctoBot <101908552+chainguardian@users.noreply.github.com> Date: Wed, 24 Jan 2024 08:41:30 -0800 Subject: [PATCH] istio-operator-fips-1.19/1.19.6-r0: fix GHSA-7f9x-gw85-8grf (#1491) --- istio-operator-fips-1.19.yaml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/istio-operator-fips-1.19.yaml b/istio-operator-fips-1.19.yaml index eff5ae273e..dc2f4f81b7 100644 --- a/istio-operator-fips-1.19.yaml +++ b/istio-operator-fips-1.19.yaml @@ -1,7 +1,7 @@ package: name: istio-operator-fips-1.19 version: 1.19.6 - epoch: 0 + epoch: 1 description: Istio operator provides user friendly options to operate the Istio service mesh copyright: - license: Apache-2.0 @@ -12,8 +12,8 @@ package: environment: contents: packages: - - ca-certificates-bundle - busybox + - ca-certificates-bundle - go-fips environment: CGO_ENABLED: "0" @@ -25,6 +25,10 @@ pipeline: tag: ${{package.version}} expected-commit: 1e08d21d684dfe61e9746abe24ea9f3c99acde62 + - uses: go/bump + with: + deps: github.com/lestrrat-go/jwx@v1.2.27 + - uses: go/build with: packages: ./operator/cmd/operator