Repository navigation

Address image CVE burden: float bases, trim runtime, unify Go toolchain - #4

Merged

aaaaaaaalex merged 22 commits into

mainfrom

cve/image-build-hardening

Sep 30, 2026

Commits on Sep 1, 2026

docs: add CVE remediation plan for forklift image builds
anthonytwh
committed
145611e
Address image CVE burden: float bases, trim runtime, unify Go toolchain
anthonytwh
committed
1b4ed90

Commits on Sep 2, 2026

Bump golang.org/x/oauth2 and stop CI pinning Go by hand
anthonytwh
committed
29cd75e

Commits on Sep 3, 2026

Commits on Sep 4, 2026

Add push-all-images-quay target
anthonytwh
committed
f4d43cf

Commits on Sep 9, 2026

Normalise weak-deps spelling and ignore stray Go binaries
anthonytwh
committed
7e94bf2

Commits on Sep 17, 2026

Scope the CVE claims to images this fork builds
anthonytwh
committed
3f1954a
Restore the update on the operator-index builder stage
anthonytwh
committed
c3f19ac

Commits on Sep 25, 2026

Restore /var/log/nginx ownership after the nginx RPM update

aaaaaaaalex
and
claude
committed
c1fb04d

Commits on Sep 28, 2026

Re-run package updates on every build

aaaaaaaalex
and
claude
committed
fcabf27

Commits on Sep 30, 2026

Pull the base images on every build

aaaaaaaalex
and
claude
committed
fe6f479
Reference BUILD_DATE in the package updates

aaaaaaaalex
and
claude
committed
6be0416