From 5e011ef56c2b72739abfb324db3a1a2aacf61607 Mon Sep 17 00:00:00 2001 From: Vasil Sudakou Date: Wed, 17 Dec 2025 18:58:50 +0300 Subject: [PATCH 1/2] fix: security fixes for enrichment images (CVE-2025-64756, CVE-2025-65945, CVE-2025-66031, CVE-2025-12816, CVE-2025-8291, CVE-2025-6075, CVE-2025-12084) --- charts/gitops-runtime/values.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/charts/gitops-runtime/values.yaml b/charts/gitops-runtime/values.yaml index 6905ebf0..1bfef01f 100644 --- a/charts/gitops-runtime/values.yaml +++ b/charts/gitops-runtime/values.yaml @@ -479,17 +479,17 @@ app-proxy: reportImage: registry: quay.io repository: codefreshplugins/argo-hub-codefresh-csdp-report-image-info - tag: 1.1.17-main + tag: 1.1.19-main # Git enrichment task image gitEnrichment: registry: quay.io repository: codefreshplugins/argo-hub-codefresh-csdp-image-enricher-git-info - tag: 1.1.17-main + tag: 1.1.19-main # Jira enrichment task image jiraEnrichment: registry: quay.io repository: codefreshplugins/argo-hub-codefresh-csdp-image-enricher-jira-info - tag: 1.1.17-main + tag: 1.1.19-main image: repository: quay.io/codefresh/cap-app-proxy tag: 5f0a3d5 From 908d9451acd4f875721cd0e2bcfb284a9074a9ca Mon Sep 17 00:00:00 2001 From: Vasil Sudakou Date: Thu, 18 Dec 2025 15:53:20 +0300 Subject: [PATCH 2/2] fix: vulnerability CVE-2025-64756 --- charts/gitops-runtime/values.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/charts/gitops-runtime/values.yaml b/charts/gitops-runtime/values.yaml index 1bfef01f..778368bb 100644 --- a/charts/gitops-runtime/values.yaml +++ b/charts/gitops-runtime/values.yaml @@ -479,17 +479,17 @@ app-proxy: reportImage: registry: quay.io repository: codefreshplugins/argo-hub-codefresh-csdp-report-image-info - tag: 1.1.19-main + tag: 1.1.20-main # Git enrichment task image gitEnrichment: registry: quay.io repository: codefreshplugins/argo-hub-codefresh-csdp-image-enricher-git-info - tag: 1.1.19-main + tag: 1.1.20-main # Jira enrichment task image jiraEnrichment: registry: quay.io repository: codefreshplugins/argo-hub-codefresh-csdp-image-enricher-jira-info - tag: 1.1.19-main + tag: 1.1.20-main image: repository: quay.io/codefresh/cap-app-proxy tag: 5f0a3d5