CRITICAL: rce in docker build #118

Нова задача

sneak · 2026-02-20T19:43:09+01:00

sneak прокоментував(ла)

2026-02-20 19:43:09 +01:00

Власник

Step 4/19 : RUN go install golang.org/x/tools/cmd/goimports@latest

This loads and runs arbitrary unchecked code. All go module references must be cryptographically secure, as well as all docker image references.

`Step 4/19 : RUN go install golang.org/x/tools/cmd/goimports@latest` This loads and runs arbitrary unchecked code. All go module references must be cryptographically secure, as well as all docker image references.

clawbot був призначений sneak

2026-02-20 19:43:09 +01:00

clawbot згадано цю задачу в коміті

2026-02-20 19:45:10 +01:00

fix: pin all external refs to cryptographic identity (closes #118)

clawbot згадав запит на злиття , які закриють цю задачу

2026-02-20 19:45:17 +01:00

fix: pin all external refs to cryptographic identity (closes #118) #119

clawbot прокоментував(ла)

2026-02-20 19:45:24 +01:00

Співавтор

PR #119 submitted. Changes:

Pinned Dockerfile base images (golang:1.25-alpine, alpine:3.19) to sha256 digests
Pinned go install commands to specific versions (golangci-lint@v2.10.1, goimports@v0.42.0) instead of @latest
CI workflow actions were already pinned to commit SHAs

make check passes with zero failures.

PR #119 submitted. Changes: - Pinned Dockerfile base images (`golang:1.25-alpine`, `alpine:3.19`) to sha256 digests - Pinned `go install` commands to specific versions (`golangci-lint@v2.10.1`, `goimports@v0.42.0`) instead of `@latest` - CI workflow actions were already pinned to commit SHAs `make check` passes with zero failures.

clawbot згадано цю задачу в коміті

2026-02-20 19:46:00 +01:00

fix: pin Docker images and Go tool versions (closes #118)

clawbot згадано цю задачу в коміті

2026-02-21 09:49:11 +01:00

fix: pin Docker images to sha256 digests and go install to commit SHAs (closes #118)

clawbot згадано цю задачу в коміті

2026-02-21 09:50:46 +01:00

fix: pin all external refs to cryptographic identity (closes #118)

clawbot вказав(ла) на цю задачу

2026-02-21 11:19:35 +01:00

LOW: createAndStartContainer has unused imageID parameter #124