trivy/0.64.1-r2: cve remediation

[octo-sts]

trivy/0.64.1-r2: fix GHSA-x4rx-4gw3-53p4

Advisory data: https://github.com/wolfi-dev/advisories/blob/main/trivy.advisories.yaml

---

"Breadcrumbs" for this automated service

• Source Code: https://go/cve-remedy-automation-source
• Logs: https://go/cve-remedy-automation-logs
• Docs: (not provided yet)

[octo-sts]

📦 Build Failed: Missing Dependency

package github.com/docker/docker was not found on the go.mod file. Please remove the package or add it to the list of 'replaces'

Build Details

Category	Details
Build System	melange/go
Failure Point	go/bump step - gobump command failed when trying to update github.com/docker/docker@v28.3.3

Root Cause Analysis 🔍

The gobump tool attempted to update the github.com/docker/docker package to version v28.3.3, but this package is not present in the go.mod file. The package either needs to be added to the go.mod dependencies or added to the 'replaces' list in the gobump configuration.

---

Was this comment helpful? Please use 👍 or 👎 reactions on this comment.