Image is out of date

[rickymulder]

New versions of the base image have been published. This hasn't been built in nearly a year and is suffering from vulnerabilities that would be solved with a new build given the base image updates.

Can this be setup to build on a schedule to capture base image updates?

[vinzent]

Or maybe just use scratch as base and only include the operator binary. then there is no need to update the base image.

[raffaelespazzoli]

with the new release the image should be updated. Can you verify and close the issue? @rickymulder

[yrro]

cert-utils-operator.v1.3.11 uses quay.io/redhat-cop/kube-rbac-proxy@sha256:c68135620167c41e3d9f6c1d2ca1eb8fa24312b86186d09b8010656b9d25fb47 which has 31 fixable CVEs according to ACS.

[davidkarlsen]

Are all of these redhat-cop operators going abandonware?

[trumbaut]

cert-utils-operator.v1.3.12 uses quay.io/redhat-cop/kube-rbac-proxy@sha256:c68135620167c41e3d9f6c1d2ca1eb8fa24312b86186d09b8010656b9d25fb47 which has currently 71 fixable CVEs according to ACS. Furthermore, quay.io/redhat-cop/cert-utils-operator@sha256:0290e7b2800a5aa8eb57b0268908f2a20a93b16403c76df4c61021048161d6ff has currently 23 fixable CVEs according to ACS.

Please release a new version to fix at least RHSA-2022:6206, RHBA-2024:5736 and RHSA-2024:8860 (CVSSv3 >= 9.0).