You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@kafka.apache.org by pa...@apache.org on 2026/04/13 13:43:46 UTC
(kafka) branch 4.3 updated (67ae18eaae3 -> 9c302a16cf3)
This is an automated email from the ASF dual-hosted git repository.
payang pushed a change to branch 4.3
in repository https://gitbox.apache.org/repos/asf/kafka.git
from 67ae18eaae3 KAFKA-20428: Fix unsubscribe failure with assignment updates (#22011)
new 7a7b6022a9a MINOR: Change trivy action (#22024)
new 9c302a16cf3 MINOR: Fix arguments in trivy scan (#22032)
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.github/workflows/docker_build_and_test.yml | 5 +++--
.github/workflows/docker_official_image_build_and_test.yml | 5 +++--
.github/workflows/docker_scan.yml | 5 +++--
3 files changed, 9 insertions(+), 6 deletions(-)
(kafka) 01/02: MINOR: Change trivy action (#22024)
Posted by pa...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
payang pushed a commit to branch 4.3
in repository https://gitbox.apache.org/repos/asf/kafka.git
commit 7a7b6022a9acd20de7b1d884ce4e0b7cdcc0e310
Author: PoAn Yang <pa...@apache.org>
AuthorDate: Sun Apr 12 23:42:08 2026 +0900
MINOR: Change trivy action (#22024)
Change to use approved pattern in infrastructure actions.
https://github.com/apache/infrastructure-actions/blob/75f430702f46fc5b4a71efc23a1ce8d72e11ba61/approved_patterns.yml#L211
Reviewers: Ryan Huang <hc...@apache.org>, Ken Huang <s7...@gmail.com>,
Chia-Ping Tsai <ch...@gmail.com>
---------
Signed-off-by: PoAn Yang <pa...@apache.org>
(cherry picked from commit eb6ce0e3d9c22ea1c34ecca293555f9fcad17981)
---
.github/workflows/docker_build_and_test.yml | 2 +-
.github/workflows/docker_official_image_build_and_test.yml | 2 +-
.github/workflows/docker_scan.yml | 2 +-
3 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/.github/workflows/docker_build_and_test.yml b/.github/workflows/docker_build_and_test.yml
index 8358f10433a..d0ae6243105 100644
--- a/.github/workflows/docker_build_and_test.yml
+++ b/.github/workflows/docker_build_and_test.yml
@@ -54,7 +54,7 @@ jobs:
run: |
python docker_build_test.py kafka/test -tag=test -type=$IMAGE_TYPE -u=$KAFKA_URL
- name: Run CVE scan
- uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # v0.33.1
+ uses: lhotari/sandboxed-trivy-action@555963036b2012b44c1071508a236e569db28ebb # v1.0.1
with:
image-ref: 'kafka/test:test'
format: 'table'
diff --git a/.github/workflows/docker_official_image_build_and_test.yml b/.github/workflows/docker_official_image_build_and_test.yml
index 1c67ef58472..a11f6b03917 100644
--- a/.github/workflows/docker_official_image_build_and_test.yml
+++ b/.github/workflows/docker_official_image_build_and_test.yml
@@ -53,7 +53,7 @@ jobs:
run: |
python docker_official_image_build_test.py kafka/test -tag=test -type=$IMAGE_TYPE -v=$KAFKA_VERSION
- name: Run CVE scan
- uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # v0.33.1
+ uses: lhotari/sandboxed-trivy-action@555963036b2012b44c1071508a236e569db28ebb # v1.0.1
with:
image-ref: 'kafka/test:test'
format: 'table'
diff --git a/.github/workflows/docker_scan.yml b/.github/workflows/docker_scan.yml
index 16df64a214b..ffe5d9d4ecf 100644
--- a/.github/workflows/docker_scan.yml
+++ b/.github/workflows/docker_scan.yml
@@ -29,7 +29,7 @@ jobs:
supported_image_tag: ['latest', '3.9.2', '4.0.1', '4.1.2', '4.2.0']
steps:
- name: Run CVE scan
- uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # v0.33.1
+ uses: lhotari/sandboxed-trivy-action@555963036b2012b44c1071508a236e569db28ebb # v1.0.1
if: always()
with:
image-ref: apache/kafka:${{ matrix.supported_image_tag }}
(kafka) 02/02: MINOR: Fix arguments in trivy scan (#22032)
Posted by pa...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
payang pushed a commit to branch 4.3
in repository https://gitbox.apache.org/repos/asf/kafka.git
commit 9c302a16cf3effd13dc710efaba38b7e26b2add1
Author: PoAn Yang <pa...@apache.org>
AuthorDate: Mon Apr 13 00:32:45 2026 +0900
MINOR: Fix arguments in trivy scan (#22032)
Use new argument `scan-ref`.
Reviewers: Chia-Ping Tsai <ch...@gmail.com>
(cherry picked from commit acd37fc30c5fdbbae772144c73b4f2c7e1c21d27)
---
.github/workflows/docker_build_and_test.yml | 3 ++-
.github/workflows/docker_official_image_build_and_test.yml | 3 ++-
.github/workflows/docker_scan.yml | 3 ++-
3 files changed, 6 insertions(+), 3 deletions(-)
diff --git a/.github/workflows/docker_build_and_test.yml b/.github/workflows/docker_build_and_test.yml
index d0ae6243105..542a41d7f39 100644
--- a/.github/workflows/docker_build_and_test.yml
+++ b/.github/workflows/docker_build_and_test.yml
@@ -56,7 +56,8 @@ jobs:
- name: Run CVE scan
uses: lhotari/sandboxed-trivy-action@555963036b2012b44c1071508a236e569db28ebb # v1.0.1
with:
- image-ref: 'kafka/test:test'
+ scan-type: 'image'
+ scan-ref: 'kafka/test:test'
format: 'table'
severity: 'CRITICAL,HIGH'
output: scan_report_${{ github.event.inputs.image_type }}.txt
diff --git a/.github/workflows/docker_official_image_build_and_test.yml b/.github/workflows/docker_official_image_build_and_test.yml
index a11f6b03917..ad35c3695b7 100644
--- a/.github/workflows/docker_official_image_build_and_test.yml
+++ b/.github/workflows/docker_official_image_build_and_test.yml
@@ -55,7 +55,8 @@ jobs:
- name: Run CVE scan
uses: lhotari/sandboxed-trivy-action@555963036b2012b44c1071508a236e569db28ebb # v1.0.1
with:
- image-ref: 'kafka/test:test'
+ scan-type: 'image'
+ scan-ref: 'kafka/test:test'
format: 'table'
severity: 'CRITICAL,HIGH'
output: scan_report_${{ github.event.inputs.image_type }}.txt
diff --git a/.github/workflows/docker_scan.yml b/.github/workflows/docker_scan.yml
index ffe5d9d4ecf..659da833422 100644
--- a/.github/workflows/docker_scan.yml
+++ b/.github/workflows/docker_scan.yml
@@ -32,7 +32,8 @@ jobs:
uses: lhotari/sandboxed-trivy-action@555963036b2012b44c1071508a236e569db28ebb # v1.0.1
if: always()
with:
- image-ref: apache/kafka:${{ matrix.supported_image_tag }}
+ scan-type: 'image'
+ scan-ref: apache/kafka:${{ matrix.supported_image_tag }}
format: 'table'
severity: 'CRITICAL,HIGH'
output: scan_report_jvm_${{ matrix.supported_image_tag }}.txt