Admin message

More banners, because everyone loves banners, right?

Maintenance break on Thursday at 15:00 (with possibility to move maintenance to Friday at 15:00 if registry data migration takes longer than anticipated). Downtime should be "short".

ADDENDUM: We will also be implementing the deletion of dormant projects - if your project is dormant for more than 12 months, you will get an email reminder. If there is no action, the project will be deleted after another 6 months (total of 18 months of inactivity)

Admin message

If your CI/CD process uses Trivy (tag:latest or v.0.69.4), please read this:

Trivy image has been compromised for around 3 hours between Thursday 19.3 and Friday 20.3. The InfoStealer scanned for CI/CD tokens, Kubernetes credentials, SSH-keys and basically everything you can get your hands on while on the CI/CD job.

There is also possibility of injecting malware into any images made through this process.

SO IF YOU ARE USING THE TRIVY IMAGE AS PART OF YOUR CI/CD, PLEASE MAKE SURE TO:

CHECK THE VERSION (LATEST OR VERSION 0.69.4)

IF USING THE VULNERABLE VERSION, CHANGE YOUR TOKENS / INFO USED IN THE PROCESS

REMAKE ANY IMAGES (IN THE CONTAINER REGISTRY, etc) WITH NON-VULNERABLE VERSIONS AND USE THEM

More informaion, see for example: https://www.wiz.io/blog/trivy-compromised-teampcp-supply-chain-attack

33 forks: 2 public, 0 internal, and 31 private
  • View demot_extra project

    Konsta Pätsi / demot_extra

    Upload New File
    0
    Updated Jan 05, 2025
    0 0 0 0
    Updated Jan 05, 2025
  • View demot_extra project

    Arttu Salonen / demot_extra

    initial commit
    0
    Updated Dec 22, 2024
    0 0 0 0
    Updated Dec 22, 2024