added csm-operator pack 1.12.1 - #282
Merged
Merged
Conversation
![bulwark-sc-ent[bot]](https://avatars.githubusercontent.com/b/255931?s=60&v=4){kind=small}
There was a problem hiding this comment.
❌ Combined scan completed with failures (conclusion: failure).
✅ Secret Scan: No secrets detected
Scan Summary:
- Total images scanned: 38
- Clean images: 38
- Images with secrets: 0
- CVE scan failed for 9 image(s)
quay.io/jetstack/cert-manager-cainjector:v1.11.0:quay.io/jetstack/cert-manager-controller:v1.11.0:quay.io/jetstack/cert-manager-webhook:v1.11.0:registry.k8s.io/sig-storage/csi-attacher:v4.11.0:registry.k8s.io/sig-storage/csi-external-health-monitor-controller:v0.17.0:- ... and 4 more failed
Please review the findings above and address any issues before merging.
There was a problem hiding this comment.
❌ CVE scan failed for 9 image(s).
Scan Summary:
- Total images scanned: 29
- Clean images: 0
- Images with CVEs: 29
- Total CVEs found: 14750
🔴 Critical CVEs: 191
🟠 High CVEs: 2430
🟡 Medium CVEs: 4227
🟢 Low CVEs: 7902
Images with CVEs:
- docker.io/openpolicyagent/kube-mgmt:9.2.1: 140 CVEs (Critical: 6, High: 28, Medium: 11, Low: 95)
Critical CVEs: CVE-2025-68121, CVE-2026-27143, CVE-2026-31789, CVE-2026-50195, CVE-2026-53492 - docker.io/openpolicyagent/opa:0.70.0: 154 CVEs (Critical: 6, High: 33, Medium: 16, Low: 99)
Critical CVEs: CVE-2025-68121, CVE-2026-27143, CVE-2026-50195, CVE-2026-53492, GHSA-v898-xg3c-w4rj - docker.io/rediscommander/redis-commander:latest: 261 CVEs (Critical: 16, High: 102, Medium: 53, Low: 90)
Critical CVEs: CVE-2021-22930, CVE-2021-22931, CVE-2021-36159, CVE-2021-3711, CVE-2021-3918, CVE-2021-44906, CVE-2022-29078, CVE-2022-37434, CVE-2022-48174, CVE-2023-26136, CVE-2023-32002, CVE-2023-42282 - gcr.io/k8s-staging-sig-storage/objectstorage-sidecar:release-0.2: 48 CVEs (Critical: 2, High: 10, Medium: 7, Low: 29)
Critical CVEs: CVE-2025-68121, CVE-2026-27143 - ghcr.io/open-telemetry/opentelemetry-collector-releases/opentelemetry-collector:0.150.1: 50 CVEs (Critical: 0, High: 6, Medium: 5, Low: 39)
- quay.io/dell/container-storage-modules/cosi:v1.1.0: 361 CVEs (Critical: 7, High: 50, Medium: 53, Low: 251)
Critical CVEs: CVE-2025-14087, CVE-2026-31789, CVE-2026-33845, CVE-2026-42010, CVE-2026-58016, CVE-2026-6653 - quay.io/dell/container-storage-modules/csi-isilon:v2.17.1: 304 CVEs (Critical: 4, High: 39, Medium: 47, Low: 214)
Critical CVEs: CVE-2026-31789, CVE-2026-58016, CVE-2026-6653 - quay.io/dell/container-storage-modules/csi-metadata-retriever:v1.14.0: 359 CVEs (Critical: 7, High: 49, Medium: 53, Low: 250)
Critical CVEs: CVE-2025-14087, CVE-2026-31789, CVE-2026-33845, CVE-2026-42010, CVE-2026-58016, CVE-2026-6653 - quay.io/dell/container-storage-modules/csi-powermax:v2.17.1: 304 CVEs (Critical: 4, High: 40, Medium: 47, Low: 213)
Critical CVEs: CVE-2026-31789, CVE-2026-58016, CVE-2026-6653 - quay.io/dell/container-storage-modules/csi-powerstore:v2.17.0: 360 CVEs (Critical: 7, High: 49, Medium: 53, Low: 251)
Critical CVEs: CVE-2025-14087, CVE-2026-31789, CVE-2026-33845, CVE-2026-42010, CVE-2026-58016, CVE-2026-6653
... and 19 more image(s)
quay.io/jetstack/cert-manager-cainjector:v1.11.0:quay.io/jetstack/cert-manager-controller:v1.11.0:quay.io/jetstack/cert-manager-webhook:v1.11.0:registry.k8s.io/sig-storage/csi-attacher:v4.11.0:registry.k8s.io/sig-storage/csi-external-health-monitor-controller:v0.17.0:registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0:registry.k8s.io/sig-storage/csi-provisioner:v6.2.0:registry.k8s.io/sig-storage/csi-resizer:v2.1.0:registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0:
❌ One or more images could not be scanned. See errors above.
There was a problem hiding this comment.
❌ Combined scan completed with failures (conclusion: failure).
✅ Secret Scan: No secrets detected
Scan Summary:
- Total images scanned: 38
- Clean images: 38
- Images with secrets: 0
- CVE scan failed for 9 image(s)
quay.io/jetstack/cert-manager-cainjector:v1.11.0:quay.io/jetstack/cert-manager-controller:v1.11.0:quay.io/jetstack/cert-manager-webhook:v1.11.0:registry.k8s.io/sig-storage/csi-attacher:v4.11.0:registry.k8s.io/sig-storage/csi-external-health-monitor-controller:v0.17.0:- ... and 4 more failed
Please review the findings above and address any issues before merging.
There was a problem hiding this comment.
❌ CVE scan failed for 9 image(s).
Scan Summary:
- Total images scanned: 29
- Clean images: 0
- Images with CVEs: 29
- Total CVEs found: 14751
🔴 Critical CVEs: 192
🟠 High CVEs: 2433
🟡 Medium CVEs: 4223
🟢 Low CVEs: 7903
Images with CVEs:
- docker.io/openpolicyagent/kube-mgmt:9.2.1: 140 CVEs (Critical: 6, High: 28, Medium: 11, Low: 95)
Critical CVEs: CVE-2025-68121, CVE-2026-27143, CVE-2026-31789, CVE-2026-50195, CVE-2026-53492 - docker.io/openpolicyagent/opa:0.70.0: 156 CVEs (Critical: 7, High: 35, Medium: 15, Low: 99)
Critical CVEs: CVE-2025-68121, CVE-2026-27143, CVE-2026-50195, CVE-2026-53492, GHSA-v898-xg3c-w4rj - docker.io/rediscommander/redis-commander:latest: 260 CVEs (Critical: 16, High: 103, Medium: 54, Low: 87)
Critical CVEs: CVE-2021-22930, CVE-2021-22931, CVE-2021-36159, CVE-2021-3711, CVE-2021-3918, CVE-2021-44906, CVE-2022-29078, CVE-2022-37434, CVE-2022-48174, CVE-2023-26136, CVE-2023-32002, CVE-2023-42282 - gcr.io/k8s-staging-sig-storage/objectstorage-sidecar:release-0.2: 48 CVEs (Critical: 2, High: 10, Medium: 7, Low: 29)
Critical CVEs: CVE-2025-68121, CVE-2026-27143 - ghcr.io/open-telemetry/opentelemetry-collector-releases/opentelemetry-collector:0.150.1: 50 CVEs (Critical: 0, High: 6, Medium: 5, Low: 39)
- quay.io/dell/container-storage-modules/cosi:v1.1.0: 361 CVEs (Critical: 7, High: 50, Medium: 53, Low: 251)
Critical CVEs: CVE-2025-14087, CVE-2026-31789, CVE-2026-33845, CVE-2026-42010, CVE-2026-58016, CVE-2026-6653 - quay.io/dell/container-storage-modules/csi-isilon:v2.17.1: 304 CVEs (Critical: 4, High: 39, Medium: 47, Low: 214)
Critical CVEs: CVE-2026-31789, CVE-2026-58016, CVE-2026-6653 - quay.io/dell/container-storage-modules/csi-metadata-retriever:v1.14.0: 359 CVEs (Critical: 7, High: 49, Medium: 53, Low: 250)
Critical CVEs: CVE-2025-14087, CVE-2026-31789, CVE-2026-33845, CVE-2026-42010, CVE-2026-58016, CVE-2026-6653 - quay.io/dell/container-storage-modules/csi-powermax:v2.17.1: 304 CVEs (Critical: 4, High: 40, Medium: 47, Low: 213)
Critical CVEs: CVE-2026-31789, CVE-2026-58016, CVE-2026-6653 - quay.io/dell/container-storage-modules/csi-powerstore:v2.17.0: 360 CVEs (Critical: 7, High: 49, Medium: 53, Low: 251)
Critical CVEs: CVE-2025-14087, CVE-2026-31789, CVE-2026-33845, CVE-2026-42010, CVE-2026-58016, CVE-2026-6653
... and 19 more image(s)
quay.io/jetstack/cert-manager-cainjector:v1.11.0:quay.io/jetstack/cert-manager-controller:v1.11.0:quay.io/jetstack/cert-manager-webhook:v1.11.0:registry.k8s.io/sig-storage/csi-attacher:v4.11.0:registry.k8s.io/sig-storage/csi-external-health-monitor-controller:v0.17.0:registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0:registry.k8s.io/sig-storage/csi-provisioner:v6.2.0:registry.k8s.io/sig-storage/csi-resizer:v2.1.0:registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0:
❌ One or more images could not be scanned. See errors above.
There was a problem hiding this comment.
❌ Combined scan completed with failures (conclusion: failure).
✅ Secret Scan: No secrets detected
Scan Summary:
- Total images scanned: 38
- Clean images: 38
- Images with secrets: 0
- CVE scan failed for 9 image(s)
quay.io/jetstack/cert-manager-cainjector:v1.11.0:quay.io/jetstack/cert-manager-controller:v1.11.0:quay.io/jetstack/cert-manager-webhook:v1.11.0:registry.k8s.io/sig-storage/csi-attacher:v4.11.0:registry.k8s.io/sig-storage/csi-external-health-monitor-controller:v0.17.0:- ... and 4 more failed
Please review the findings above and address any issues before merging.
There was a problem hiding this comment.
❌ CVE scan failed for 9 image(s).
Scan Summary:
- Total images scanned: 29
- Clean images: 0
- Images with CVEs: 29
- Total CVEs found: 14907
🔴 Critical CVEs: 192
🟠 High CVEs: 2385
🟡 Medium CVEs: 4269
🟢 Low CVEs: 8061
Images with CVEs:
- docker.io/openpolicyagent/kube-mgmt:9.2.1: 140 CVEs (Critical: 6, High: 28, Medium: 11, Low: 95)
Critical CVEs: CVE-2025-68121, CVE-2026-27143, CVE-2026-31789, CVE-2026-50195, CVE-2026-53492 - docker.io/openpolicyagent/opa:0.70.0: 156 CVEs (Critical: 7, High: 33, Medium: 16, Low: 100)
Critical CVEs: CVE-2025-68121, CVE-2026-27143, CVE-2026-50195, CVE-2026-53492, GHSA-v898-xg3c-w4rj - docker.io/rediscommander/redis-commander:latest: 260 CVEs (Critical: 16, High: 103, Medium: 54, Low: 87)
Critical CVEs: CVE-2021-22930, CVE-2021-22931, CVE-2021-36159, CVE-2021-3711, CVE-2021-3918, CVE-2021-44906, CVE-2022-29078, CVE-2022-37434, CVE-2022-48174, CVE-2023-26136, CVE-2023-32002, CVE-2023-42282 - gcr.io/k8s-staging-sig-storage/objectstorage-sidecar:release-0.2: 48 CVEs (Critical: 2, High: 10, Medium: 7, Low: 29)
Critical CVEs: CVE-2025-68121, CVE-2026-27143 - ghcr.io/open-telemetry/opentelemetry-collector-releases/opentelemetry-collector:0.150.1: 50 CVEs (Critical: 0, High: 6, Medium: 5, Low: 39)
- quay.io/dell/container-storage-modules/cosi:v1.1.0: 367 CVEs (Critical: 7, High: 48, Medium: 55, Low: 257)
Critical CVEs: CVE-2025-14087, CVE-2026-31789, CVE-2026-33845, CVE-2026-42010, CVE-2026-58016, CVE-2026-6653 - quay.io/dell/container-storage-modules/csi-isilon:v2.17.1: 310 CVEs (Critical: 4, High: 37, Medium: 49, Low: 220)
Critical CVEs: CVE-2026-31789, CVE-2026-58016, CVE-2026-6653 - quay.io/dell/container-storage-modules/csi-metadata-retriever:v1.14.0: 365 CVEs (Critical: 7, High: 47, Medium: 55, Low: 256)
Critical CVEs: CVE-2025-14087, CVE-2026-31789, CVE-2026-33845, CVE-2026-42010, CVE-2026-58016, CVE-2026-6653 - quay.io/dell/container-storage-modules/csi-powermax:v2.17.1: 310 CVEs (Critical: 4, High: 38, Medium: 49, Low: 219)
Critical CVEs: CVE-2026-31789, CVE-2026-58016, CVE-2026-6653 - quay.io/dell/container-storage-modules/csi-powerstore:v2.17.0: 366 CVEs (Critical: 7, High: 47, Medium: 55, Low: 257)
Critical CVEs: CVE-2025-14087, CVE-2026-31789, CVE-2026-33845, CVE-2026-42010, CVE-2026-58016, CVE-2026-6653
... and 19 more image(s)
quay.io/jetstack/cert-manager-cainjector:v1.11.0:quay.io/jetstack/cert-manager-controller:v1.11.0:quay.io/jetstack/cert-manager-webhook:v1.11.0:registry.k8s.io/sig-storage/csi-attacher:v4.11.0:registry.k8s.io/sig-storage/csi-external-health-monitor-controller:v0.17.0:registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0:registry.k8s.io/sig-storage/csi-provisioner:v6.2.0:registry.k8s.io/sig-storage/csi-resizer:v2.1.0:registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0:
❌ One or more images could not be scanned. See errors above.
afayasa
dismissed
bulwark-sc-ent[bot]’s stale review
July 29, 2026 15:35
scan issue - some of the image scan aren't complete and getting timed out. And since it is community pack, dismissing it.
vishwanaths
approved these changes
Jul 30, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adding the updated csm-operator for v1.12.1, CSM v1.17.1