fix GHSA-m425-mq94-257g

2025-10-23 00:02:10 +00:00 · 2023-10-27 13:10:45 +02:00
parent fa3011b369
commit 169edf4e45
2 changed files with 13 additions and 2 deletions
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,2 @@
-maintain/
+maintain/
+/build
--- a/amd64.dockerfile
+++ b/amd64.dockerfile
@@ -8,7 +8,17 @@
      git; \
    git clone https://github.com/influxdata/telegraf.git; \
    cd /go/telegraf; \
-    git checkout ${APP_VERSION}; \
+    git checkout ${APP_VERSION};
+
+  # fix security
+  # https://github.com/advisories/GHSA-m425-mq94-257g
+  RUN set -ex; \
+    sed -i 's#\(google.golang.org/grpc\) v1.58.2#\1 v1.58.3#g' /go/telegraf/go.mod; \
+    cd /go/telegraf; \
+    go mod tidy;
+
+  RUN set -ex; \
+    cd /go/telegraf; \
    make build -j $(nproc); \
    mv telegraf /usr/local/bin;