From 81139ce9a61b3da0ea430dc92272eb826734444e Mon Sep 17 00:00:00 2001 From: Joana Maia Date: Tue, 7 Jul 2026 15:58:57 +0100 Subject: [PATCH] chore: update pvtr plugin to v0.24.0+2fixes Bumps pvtr-github-repo-scanner from v0.23.2 (c7bd9538) to commit c1095c95, which is post-v0.24.0 and includes two required fixes: - fix(OSPS-BR-07.01): consult Security Insights when security_and_analysis is null - fix(OSPS-LE-02.01): pass deprecated but OSI/FSF-approved SPDX IDs Also updates the plugin build stage to golang:1.26.4-alpine3.22, required by go.mod at the new commit (go 1.26.4). Privateer binary stays at 0.21.2, confirmed compatible by pvtr's own Dockerfile. Co-Authored-By: Claude Sonnet 4.6 Signed-off-by: Joana Maia --- .../docker/Dockerfile.security_best_practices_worker | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/scripts/services/docker/Dockerfile.security_best_practices_worker b/scripts/services/docker/Dockerfile.security_best_practices_worker index cb250dc12f..04baff781b 100644 --- a/scripts/services/docker/Dockerfile.security_best_practices_worker +++ b/scripts/services/docker/Dockerfile.security_best_practices_worker @@ -1,4 +1,4 @@ -ARG PVTR_VERSION=v0.23.2 +ARG PVTR_VERSION=v0.24.0 FROM alpine:3.21 AS core RUN apk add --no-cache wget tar unzip @@ -10,13 +10,13 @@ ARG PLATFORM=Linux_x86_64 RUN wget https://github.com/privateerproj/privateer/releases/download/v${VERSION}/privateer_${PLATFORM}.tar.gz RUN tar -xzf privateer_${PLATFORM}.tar.gz -FROM golang:1.26.3-alpine3.23 AS plugin +FROM golang:1.26.4-alpine3.22 AS plugin RUN apk add --no-cache make git WORKDIR /plugin -ARG PVTR_COMMIT=c7bd9538d64f7eaab94a05c9b5fd05458a387b1c +ARG PVTR_COMMIT=c1095c95a1b399ec63e4f4e2b7880b0ef55e604f ARG PVTR_VERSION # To run the latest version of the plugin, we need to use the latest commit of the pvtr-github-repo-scanner repository. -# Currently using v0.23.2: https://github.com/ossf/pvtr-github-repo-scanner/commit/c7bd9538d64f7eaab94a05c9b5fd05458a387b1c +# Currently using v0.24.0+2fixes: https://github.com/ossf/pvtr-github-repo-scanner/commit/c1095c95a1b399ec63e4f4e2b7880b0ef55e604f RUN git clone https://github.com/ossf/pvtr-github-repo-scanner.git && cd pvtr-github-repo-scanner && git checkout ${PVTR_COMMIT} RUN cd pvtr-github-repo-scanner && make binary && cp github-repo ../github-repo