Skip to content

Dependency CVE fixes #290

Description

@wwuck

Hi @caitlinelfring

Is this project still under active maintenance? There are quite a few CVE in dependencies that could be fixed with dependabot updates.

$ trivy image --ignore-unfixed --table-mode=summary getwoke/woke
2026-03-02T14:38:55+11:00       INFO    [vuln] Vulnerability scanning is enabled
2026-03-02T14:38:55+11:00       INFO    [secret] Secret scanning is enabled
2026-03-02T14:38:55+11:00       INFO    [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2026-03-02T14:38:55+11:00       INFO    [secret] Please see https://trivy.dev/docs/v0.69/guide/scanner/secret#recommendation for faster secret detection
2026-03-02T14:38:55+11:00       INFO    Detected OS     family="alpine" version="3.12.12"
2026-03-02T14:38:55+11:00       INFO    [alpine] Detecting vulnerabilities...   os_version="3.12" repository="3.12" pkg_num=14
2026-03-02T14:38:55+11:00       INFO    Number of language-specific files       num=1
2026-03-02T14:38:55+11:00       INFO    [gobinary] Detecting vulnerabilities...
2026-03-02T14:38:55+11:00       WARN    Using severities from other vendors for some vulnerabilities. Read https://trivy.dev/docs/v0.69/guide/scanner/vulnerability#severity-selection for details.
2026-03-02T14:38:55+11:00       WARN    This OS version is no longer supported by the distribution      family="alpine" version="3.12.12"
2026-03-02T14:38:55+11:00       WARN    The vulnerability detection may be insufficient because security updates are not provided

Report Summary

┌───────────────────────────────┬──────────┬─────────────────┬─────────┐
│            Target             │   Type   │ Vulnerabilities │ Secrets │
├───────────────────────────────┼──────────┼─────────────────┼─────────┤
│ getwoke/woke (alpine 3.12.12) │  alpine  │        1        │    -    │
├───────────────────────────────┼──────────┼─────────────────┼─────────┤
│ usr/bin/woke                  │ gobinary │       82        │    -    │
└───────────────────────────────┴──────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions