Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

jenkins/2.480 package update #30304

Merged
merged 1 commit into from
Oct 8, 2024

Conversation

octo-sts[bot]
Copy link
Contributor

@octo-sts octo-sts bot commented Oct 8, 2024

@octo-sts octo-sts bot added request-version-update request for a newer version of a package automated pr labels Oct 8, 2024
Copy link
Contributor

github-actions bot commented Oct 8, 2024

Package jenkins: Click to expand/collapse

Package jenkins:
Modified: /usr/share/java/jenkins/jenkins.war

Package jenkins-compat: Click to expand/collapse

Package jenkins-compat:
Unchanged

Package jenkins-remoting: Click to expand/collapse

Package jenkins-remoting:
Modified: /usr/share/jenkins/remoting-3261.v9c670a_4748a_9.jar

malcontent found differences: Click to expand/collapse

Deleted: jenkins/var/lib/db/sbom/jenkins-2.479-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/538734e0174b8830f283e3441b5f

Deleted: jenkins-compat/var/lib/db/sbom/jenkins-compat-2.479-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/90285205a6547d044a3af24bb8fe

Added: jenkins/var/lib/db/sbom/jenkins-2.480-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/e09f2c6b1333d9bf96615fdeea47

Added: jenkins-compat/var/lib/db/sbom/jenkins-compat-2.480-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/db15a86b53e609658022916fb8b7

Moved: jenkins-remoting/var/lib/db/sbom/jenkins-remoting-2.479-r0.spdx.json -> /tmp/wolfictl-apk-293916010/jenkins-remoting/var/lib/db/sbom/jenkins-remoting-2.480-r0.spdx.json (similarity: 0.98)

@octo-sts octo-sts bot added the bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. label Oct 8, 2024
@mamccorm mamccorm merged commit 320b24c into main Oct 8, 2024
14 of 15 checks passed
@mamccorm mamccorm deleted the wolfictl-f244ad34-3de9-4c54-98ee-efe66ce64e10 branch October 8, 2024 18:47
gdonval pushed a commit to gdonval/wolfi-os that referenced this pull request Oct 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
automated pr bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. request-version-update request for a newer version of a package
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants