helm-push/0.10.4-r25: cve remediation

[octo-sts]

helm-push/0.10.4-r25: fix GHSA-5xqw-8hwv-wg92

Advisory data: https://github.com/wolfi-dev/advisories/blob/main/helm-push.advisories.yaml

---

"Breadcrumbs" for this automated service

• Source Code: https://go/cve-remedy-automation-source
• Logs: https://go/cve-remedy-automation-logs
• Docs: (not provided yet)

[octo-sts]

📦 Build Failed: Missing Dependency

failed to run update. Error: package google.golang.org/grpc was not found on the go.mod file. Please remove the package or add it to the list of 'replaces'

Build Details

Category	Details
Build System	Go (Golang)
Failure Point	go/bump step during gobump execution

Root Cause Analysis 🔍

The build is trying to update the google.golang.org/grpc package, but this package is not found in the go.mod file. The gobump tool requires all packages being updated to either exist in go.mod or be explicitly listed in the 'replaces' argument.

---

Was this comment helpful? Please use 👍 or 👎 reactions on this comment.