diff --git a/.pipelines/templates/scan-images.yaml b/.pipelines/templates/scan-images.yaml index ca51c2e62..5e60d40fc 100644 --- a/.pipelines/templates/scan-images.yaml +++ b/.pipelines/templates/scan-images.yaml @@ -11,8 +11,7 @@ steps: tar zxvf trivy_${TRIVY_VERSION:-0.24.4}_Linux-64bit.tar.gz # show all vulnerabilities in the logs ./trivy image --reset - # TODO(aramase): add proxy-init image after https://github.com/kubernetes/release/issues/3593 is fixed - for IMAGE_NAME in "proxy" "webhook"; do + for IMAGE_NAME in "proxy" "proxy-init" "webhook"; do ./trivy image "${REGISTRY}/${IMAGE_NAME}:${IMAGE_VERSION}-linux-amd64" ./trivy image --exit-code 1 --ignore-unfixed --severity MEDIUM,HIGH,CRITICAL "${REGISTRY}/${IMAGE_NAME}:${IMAGE_VERSION}-linux-amd64" || exit 1 done diff --git a/docker/proxy-init.Dockerfile b/docker/proxy-init.Dockerfile index c1d7a1119..e6a6975ef 100644 --- a/docker/proxy-init.Dockerfile +++ b/docker/proxy-init.Dockerfile @@ -1,4 +1,4 @@ -FROM --platform=${TARGETPLATFORM:-linux/amd64} registry.k8s.io/build-image/distroless-iptables:v0.5.2 +FROM --platform=${TARGETPLATFORM:-linux/amd64} registry.k8s.io/build-image/distroless-iptables:v0.5.4 COPY ./init/init-iptables.sh /bin/ RUN chmod +x /bin/init-iptables.sh