From 25c5a70bc65d666f289134b3670c5d982e92534b Mon Sep 17 00:00:00 2001 From: Lukas Hirt Date: Thu, 15 Oct 2026 15:52:18 +0200 Subject: [PATCH] build(deps): [OCISDEV-1557] bump golang builder digest to Go 1.27.2 The pinned golang:1.27-alpine digest ships Go 1.27.1, whose stdlib is affected by CVE-2026-78667, CVE-2026-78669 and CVE-2026-97031 and fails the Trivy gate. The new digest ships Go 1.27.2. Signed-off-by: Lukas Hirt --- Dockerfile.multiarch | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile.multiarch b/Dockerfile.multiarch index b60cc04..e8dc958 100644 --- a/Dockerfile.multiarch +++ b/Dockerfile.multiarch @@ -21,7 +21,7 @@ WORKDIR /build/frontend RUN pnpm install --frozen-lockfile && pnpm build -FROM docker.io/golang:1.27-alpine@sha256:8a5910f31396cd4d89662f56c68b3ae31d374308270a1c3bd96672ee5ed43414 AS go-builder +FROM docker.io/golang:1.27-alpine@sha256:f92b6ef800e499660581efdabdf25d9d817a9d124eaf900924f0504e7e27e12d AS go-builder ARG TARGETARCH