Skip to content

fix(controlplane): remediate migrations image and moby/moby vulnerabilities #3207

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
migmartri merged 1 commit into from
Jun 14, 2026
+7 −11
Merged

fix(controlplane): remediate migrations image and moby/moby vulnerabilities #3207

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions app/controlplane/Dockerfile.migrations
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,9 +1,9 @@
# Container image built by go-releaser that's used to run migrations against the database during deployment
# See https://atlasgo.io/guides/deploying/image
# from: arigaio/atlas:latest (v1.2.1-3ca392d-canary)
# docker run arigaio/atlas@sha256:29668819bfe510e06ccf84cfbf795ad504a0b310a9edbb695c1cd277edac11cb version
# atlas version v1.2.1-3ca392d-canary
FROM arigaio/atlas@sha256:29668819bfe510e06ccf84cfbf795ad504a0b310a9edbb695c1cd277edac11cb as base
# from: arigaio/atlas:latest (v1.2.3-97b7881-canary)
# docker run arigaio/atlas@sha256:7470216c7ecc93db7a51d895fbc9c3e7d3885763c424f07d115b1da9410256bb version
# atlas version v1.2.3-97b7881-canary
FROM arigaio/atlas@sha256:7470216c7ecc93db7a51d895fbc9c3e7d3885763c424f07d115b1da9410256bb as base

FROM scratch
# Update permissions to make it readable by the user
Expand Down
2 changes: 1 addition & 1 deletion app/controlplane/pkg/biz/biz.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -78,7 +78,7 @@ type IdentityReference struct {
Name *string
}

// generate a DNS1123-valid random name using moby's namesgenerator
// generate a DNS1123-valid random name from the given prefix
// plus an additional random number
func generateValidDNS1123WithSuffix(prefix string) (string, error) {
// Append a random number to it
Expand Down
5 changes: 2 additions & 3 deletions app/controlplane/pkg/biz/organization.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,6 @@ import (
"github.com/chainloop-dev/chainloop/pkg/servicelogger"
"github.com/go-kratos/kratos/v2/log"
"github.com/google/uuid"
"github.com/moby/moby/pkg/namesgenerator"
)

var organizationTracer = otelx.Tracer("chainloop-controlplane", "biz/organization")
Expand Down Expand Up @@ -140,8 +139,8 @@ func (uc *OrganizationUseCase) CreateWithRandomName(ctx context.Context, opts ..

// Try 10 times to create a random name
for i := 0; i < RandomNameMaxTries; i++ {
// Create a random name
prefix := namesgenerator.GetRandomName(0)
// Create a random name using a short unique prefix
prefix := "org-" + uuid.NewString()[:8]
name, err := generateValidDNS1123WithSuffix(prefix)
if err != nil {
return nil, fmt.Errorf("failed to generate random name: %w", err)
Expand Down
1 change: 0 additions & 1 deletion go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,6 @@ require (
github.com/jedib0t/go-pretty/v6 v6.8.0
github.com/joshdk/go-junit v1.0.0
github.com/lib/pq v1.12.3
github.com/moby/moby v28.5.2+incompatible
github.com/opencontainers/image-spec v1.1.1
github.com/prometheus/client_golang v1.23.2
github.com/rs/zerolog v1.35.1
Expand Down
2 changes: 0 additions & 2 deletions go.sum
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -917,8 +917,6 @@ github.com/moby/docker-image-spec v1.3.1 h1:jMKff3w6PgbfSa69GfNg+zN/XLhfXJGnEx3N
github.com/moby/docker-image-spec v1.3.1/go.mod h1:eKmb5VW8vQEh/BAr2yvVNvuiJuY6UIocYsFu/DxxRpo=
github.com/moby/go-archive v0.1.0 h1:Kk/5rdW/g+H8NHdJW2gsXyZ7UnzvJNOy6VKJqueWdcQ=
github.com/moby/go-archive v0.1.0/go.mod h1:G9B+YoujNohJmrIYFBpSd54GTUB4lt9S+xVQvsJyFuo=
github.com/moby/moby v28.5.2+incompatible h1:hIn6qcenb3JY1E3STwqEbBvJ8bha+u1LpqjX4CBvNCk=
github.com/moby/moby v28.5.2+incompatible/go.mod h1:fDXVQ6+S340veQPv35CzDahGBmHsiclFwfEygB/TWMc=
github.com/moby/patternmatcher v0.6.0 h1:GmP9lR19aU5GqSSFko+5pRqHi+Ohk1O69aFiKkVGiPk=
github.com/moby/patternmatcher v0.6.0/go.mod h1:hDPoyOpDY7OrrMDLaYoY3hf52gNCR/YOUYxkhApJIxc=
github.com/moby/sys/atomicwriter v0.1.0 h1:kw5D/EqkBwsBFi0ss9v1VG3wIkVhzGvLklJ+w3A14Sw=
Expand Down
Loading