docker-machine-driver-harvester/1.0.2-r0: cve remediation

[octo-sts]

docker-machine-driver-harvester/1.0.2-r0: fix GHSA-gh5c-3h97-2f3q

Advisory data: https://github.com/wolfi-dev/advisories/blob/main/docker-machine-driver-harvester.advisories.yaml

---

"Breadcrumbs" for this automated service

• Source Code: https://go/cve-remedy-automation-source
• Logs: https://go/cve-remedy-automation-logs
• Docs: (not provided yet)

[octo-sts]

🔄 Build Failed: Git Checkout Error

fatal: Remote branch v1.0.2 not found in upstream origin

Build Details

Category	Details
Build System	Go
Failure Point	git checkout v1.0.2

Root Cause Analysis 🔍

The build is attempting to check out tag 'v1.0.2' from the repository, but it's treating it as a branch rather than a tag. The log shows the system is using 'git clone --branch=v1.0.2' which assumes v1.0.2 is a branch, not a tag. Although the log shows some tag-related commands later, the initial checkout appears to have failed. The build system needs to be configured to properly check out a tag instead of treating it as a branch.

---

Was this comment helpful? Please use 👍 or 👎 reactions on this comment.

[dnegreira]

Closing as advisory has been merged wolfi-dev/advisories#16778