You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@kafka.apache.org by pa...@apache.org on 2026/04/13 13:44:22 UTC
(kafka) branch 4.2 updated (8adfdeca85a -> 6c7e6fb2c64)
This is an automated email from the ASF dual-hosted git repository.
payang pushed a change to branch 4.2
in repository https://gitbox.apache.org/repos/asf/kafka.git
from 8adfdeca85a Bump version to 4.2.1
new c94a8b60558 MINOR: Change trivy action (#22024)
new 6c7e6fb2c64 MINOR: Fix arguments in trivy scan (#22032)
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.github/workflows/docker_build_and_test.yml | 5 +++--
.github/workflows/docker_official_image_build_and_test.yml | 5 +++--
.github/workflows/docker_scan.yml | 5 +++--
3 files changed, 9 insertions(+), 6 deletions(-)
(kafka) 02/02: MINOR: Fix arguments in trivy scan (#22032)
Posted by pa...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
payang pushed a commit to branch 4.2
in repository https://gitbox.apache.org/repos/asf/kafka.git
commit 6c7e6fb2c64632572df3a87af17d13801d66eec3
Author: PoAn Yang <pa...@apache.org>
AuthorDate: Mon Apr 13 00:32:45 2026 +0900
MINOR: Fix arguments in trivy scan (#22032)
Use new argument `scan-ref`.
Reviewers: Chia-Ping Tsai <ch...@gmail.com>
(cherry picked from commit acd37fc30c5fdbbae772144c73b4f2c7e1c21d27)
---
.github/workflows/docker_build_and_test.yml | 3 ++-
.github/workflows/docker_official_image_build_and_test.yml | 3 ++-
.github/workflows/docker_scan.yml | 3 ++-
3 files changed, 6 insertions(+), 3 deletions(-)
diff --git a/.github/workflows/docker_build_and_test.yml b/.github/workflows/docker_build_and_test.yml
index d0ae6243105..542a41d7f39 100644
--- a/.github/workflows/docker_build_and_test.yml
+++ b/.github/workflows/docker_build_and_test.yml
@@ -56,7 +56,8 @@ jobs:
- name: Run CVE scan
uses: lhotari/sandboxed-trivy-action@555963036b2012b44c1071508a236e569db28ebb # v1.0.1
with:
- image-ref: 'kafka/test:test'
+ scan-type: 'image'
+ scan-ref: 'kafka/test:test'
format: 'table'
severity: 'CRITICAL,HIGH'
output: scan_report_${{ github.event.inputs.image_type }}.txt
diff --git a/.github/workflows/docker_official_image_build_and_test.yml b/.github/workflows/docker_official_image_build_and_test.yml
index a11f6b03917..ad35c3695b7 100644
--- a/.github/workflows/docker_official_image_build_and_test.yml
+++ b/.github/workflows/docker_official_image_build_and_test.yml
@@ -55,7 +55,8 @@ jobs:
- name: Run CVE scan
uses: lhotari/sandboxed-trivy-action@555963036b2012b44c1071508a236e569db28ebb # v1.0.1
with:
- image-ref: 'kafka/test:test'
+ scan-type: 'image'
+ scan-ref: 'kafka/test:test'
format: 'table'
severity: 'CRITICAL,HIGH'
output: scan_report_${{ github.event.inputs.image_type }}.txt
diff --git a/.github/workflows/docker_scan.yml b/.github/workflows/docker_scan.yml
index 97cc4f59921..f1f3b318494 100644
--- a/.github/workflows/docker_scan.yml
+++ b/.github/workflows/docker_scan.yml
@@ -32,7 +32,8 @@ jobs:
uses: lhotari/sandboxed-trivy-action@555963036b2012b44c1071508a236e569db28ebb # v1.0.1
if: always()
with:
- image-ref: apache/kafka:${{ matrix.supported_image_tag }}
+ scan-type: 'image'
+ scan-ref: apache/kafka:${{ matrix.supported_image_tag }}
format: 'table'
severity: 'CRITICAL,HIGH'
output: scan_report_jvm_${{ matrix.supported_image_tag }}.txt
(kafka) 01/02: MINOR: Change trivy action (#22024)
Posted by pa...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
payang pushed a commit to branch 4.2
in repository https://gitbox.apache.org/repos/asf/kafka.git
commit c94a8b605589c6ab6617029490f506462896e49d
Author: PoAn Yang <pa...@apache.org>
AuthorDate: Sun Apr 12 23:42:08 2026 +0900
MINOR: Change trivy action (#22024)
Change to use approved pattern in infrastructure actions.
https://github.com/apache/infrastructure-actions/blob/75f430702f46fc5b4a71efc23a1ce8d72e11ba61/approved_patterns.yml#L211
Reviewers: Ryan Huang <hc...@apache.org>, Ken Huang <s7...@gmail.com>,
Chia-Ping Tsai <ch...@gmail.com>
---------
Signed-off-by: PoAn Yang <pa...@apache.org>
(cherry picked from commit eb6ce0e3d9c22ea1c34ecca293555f9fcad17981)
---
.github/workflows/docker_build_and_test.yml | 2 +-
.github/workflows/docker_official_image_build_and_test.yml | 2 +-
.github/workflows/docker_scan.yml | 2 +-
3 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/.github/workflows/docker_build_and_test.yml b/.github/workflows/docker_build_and_test.yml
index 8358f10433a..d0ae6243105 100644
--- a/.github/workflows/docker_build_and_test.yml
+++ b/.github/workflows/docker_build_and_test.yml
@@ -54,7 +54,7 @@ jobs:
run: |
python docker_build_test.py kafka/test -tag=test -type=$IMAGE_TYPE -u=$KAFKA_URL
- name: Run CVE scan
- uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # v0.33.1
+ uses: lhotari/sandboxed-trivy-action@555963036b2012b44c1071508a236e569db28ebb # v1.0.1
with:
image-ref: 'kafka/test:test'
format: 'table'
diff --git a/.github/workflows/docker_official_image_build_and_test.yml b/.github/workflows/docker_official_image_build_and_test.yml
index 1c67ef58472..a11f6b03917 100644
--- a/.github/workflows/docker_official_image_build_and_test.yml
+++ b/.github/workflows/docker_official_image_build_and_test.yml
@@ -53,7 +53,7 @@ jobs:
run: |
python docker_official_image_build_test.py kafka/test -tag=test -type=$IMAGE_TYPE -v=$KAFKA_VERSION
- name: Run CVE scan
- uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # v0.33.1
+ uses: lhotari/sandboxed-trivy-action@555963036b2012b44c1071508a236e569db28ebb # v1.0.1
with:
image-ref: 'kafka/test:test'
format: 'table'
diff --git a/.github/workflows/docker_scan.yml b/.github/workflows/docker_scan.yml
index 30f9b814b51..97cc4f59921 100644
--- a/.github/workflows/docker_scan.yml
+++ b/.github/workflows/docker_scan.yml
@@ -29,7 +29,7 @@ jobs:
supported_image_tag: ['latest', '3.9.1', '4.0.1', '4.1.1']
steps:
- name: Run CVE scan
- uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # v0.33.1
+ uses: lhotari/sandboxed-trivy-action@555963036b2012b44c1071508a236e569db28ebb # v1.0.1
if: always()
with:
image-ref: apache/kafka:${{ matrix.supported_image_tag }}