Skip to content

Container Solution - CVE Fix - Gitea #3048

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
DivyaUpreti merged 11 commits into from
Aug 3, 2026
Merged

Container Solution - CVE Fix - Gitea #3048

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
e3f681e
fix: refresh triggers
Feb 18, 2026
77e1c7d
Merge branch 'master' of github.com:GoogleCloudPlatform/click-to-deploy
Feb 19, 2026
c434253
Merge branch 'master' of github.com:GoogleCloudPlatform/click-to-deploy
Apr 9, 2026
20d6c49
merge branch 'master' of github.com:GoogleCloudPlatform/click-to-deploy
May 28, 2026
2841068
Merge branch 'master' of github.com:GoogleCloudPlatform/click-to-deploy
May 29, 2026
e31c32c
Merge branch 'master' of github.com:GoogleCloudPlatform/click-to-deploy
Jun 3, 2026
8d7d22d
Merge branch 'master' of github.com:GoogleCloudPlatform/click-to-deploy
Jun 4, 2026
82f8939
Merge branch 'master' of github.com:GoogleCloudPlatform/click-to-deploy
Jun 7, 2026
88d0a7c
Merge branch 'master' of github.com:GoogleCloudPlatform/click-to-deploy
Jul 31, 2026
96cb0cb
Patch critical base OS CVEs for Gitea 1.25, 1.23, and 1.22 containers
Aug 1, 2026
8196d88
Merge branch 'master' into gitea-cvefix
DivyaUpreti Aug 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 6 additions & 4 deletions docker/gitea/1/debian12/1.22/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
ARG BASE_REGISTRY="docker.io"
FROM marketplace.gcr.io/google/debian12@sha256:f13f9826c524466f844e74534b8add32f51acd2be428b5dee782fe9086e59861 as ospo
FROM marketplace.gcr.io/google/debian12@sha256:c2a5eb3516da4c3bb0cf2d6fea739bd7b2dc7b1ac444b5fbd7c4def2aa57d4a0 as ospo

# Download Licenses and restricted source-code
COPY components.csv /components.csv
Expand All @@ -17,7 +17,7 @@ RUN mkdir -p /usr/src/licenses \
&& /download-ref-repos.sh /source_code.txt /usr/src

#Build stage
FROM docker.io/golang:bookworm AS build-env
FROM docker.io/library/golang:1.25-bookworm AS build-env

ARG GOPROXY
ENV GOPROXY ${GOPROXY:-direct}
Expand Down Expand Up @@ -49,7 +49,7 @@ RUN make clean-all build

# Begin env-to-ini build
RUN go build contrib/environment-to-ini/environment-to-ini.go
FROM marketplace.gcr.io/google/debian12@sha256:f13f9826c524466f844e74534b8add32f51acd2be428b5dee782fe9086e59861
FROM marketplace.gcr.io/google/debian12@sha256:c2a5eb3516da4c3bb0cf2d6fea739bd7b2dc7b1ac444b5fbd7c4def2aa57d4a0

COPY --from=ospo /usr/src /usr/src

Expand All @@ -64,7 +64,9 @@ RUN apt-get update && \
openssh-server \
s6 \
sqlite3 \
gnupg
gnupg \
&& apt-get install -y --only-upgrade perl zlib1g \
&& rm -rf /var/lib/apt/lists/*

RUN ln -s /usr/lib/x86_64-linux-musl/libc.so /lib/libc.musl-x86_64.so.1 \
&& ssh-keygen -A \
Expand Down
10 changes: 6 additions & 4 deletions docker/gitea/1/debian12/1.23/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
ARG BASE_REGISTRY="docker.io"
FROM marketplace.gcr.io/google/debian12@sha256:f13f9826c524466f844e74534b8add32f51acd2be428b5dee782fe9086e59861 as ospo
FROM marketplace.gcr.io/google/debian12@sha256:c2a5eb3516da4c3bb0cf2d6fea739bd7b2dc7b1ac444b5fbd7c4def2aa57d4a0 as ospo

# Download Licenses and restricted source-code
COPY components.csv /components.csv
Expand All @@ -17,7 +17,7 @@ RUN mkdir -p /usr/src/licenses \
&& /download-ref-repos.sh /source_code.txt /usr/src

#Build stage
FROM docker.io/golang:bookworm AS build-env
FROM docker.io/library/golang:1.25-bookworm AS build-env

ARG GOPROXY
ENV GOPROXY ${GOPROXY:-direct}
Expand Down Expand Up @@ -49,7 +49,7 @@ RUN make clean-all build

# Begin env-to-ini build
RUN go build contrib/environment-to-ini/environment-to-ini.go
FROM marketplace.gcr.io/google/debian12@sha256:f13f9826c524466f844e74534b8add32f51acd2be428b5dee782fe9086e59861
FROM marketplace.gcr.io/google/debian12@sha256:c2a5eb3516da4c3bb0cf2d6fea739bd7b2dc7b1ac444b5fbd7c4def2aa57d4a0

COPY --from=ospo /usr/src /usr/src

Expand All @@ -64,7 +64,9 @@ RUN apt-get update && \
openssh-server \
s6 \
sqlite3 \
gnupg
gnupg \
&& apt-get install -y --only-upgrade perl zlib1g \
&& rm -rf /var/lib/apt/lists/*

RUN ln -s /usr/lib/x86_64-linux-musl/libc.so /lib/libc.musl-x86_64.so.1 \
&& ssh-keygen -A \
Expand Down
10 changes: 6 additions & 4 deletions docker/gitea/1/debian12/1.25/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
ARG BASE_REGISTRY="docker.io"
FROM marketplace.gcr.io/google/debian12@sha256:f13f9826c524466f844e74534b8add32f51acd2be428b5dee782fe9086e59861 as ospo
FROM marketplace.gcr.io/google/debian12@sha256:c2a5eb3516da4c3bb0cf2d6fea739bd7b2dc7b1ac444b5fbd7c4def2aa57d4a0 as ospo

# Download Licenses and restricted source-code
COPY components.csv /components.csv
Expand All @@ -17,7 +17,7 @@ RUN mkdir -p /usr/src/licenses \
&& /download-ref-repos.sh /source_code.txt /usr/src

#Build stage
FROM docker.io/golang:bookworm AS build-env
FROM docker.io/library/golang:1.25-bookworm AS build-env

ARG GOPROXY
ENV GOPROXY ${GOPROXY:-direct}
Expand Down Expand Up @@ -49,7 +49,7 @@ RUN make clean-all build

# Begin env-to-ini build
RUN go build contrib/environment-to-ini/environment-to-ini.go
FROM marketplace.gcr.io/google/debian12@sha256:f13f9826c524466f844e74534b8add32f51acd2be428b5dee782fe9086e59861
FROM marketplace.gcr.io/google/debian12@sha256:c2a5eb3516da4c3bb0cf2d6fea739bd7b2dc7b1ac444b5fbd7c4def2aa57d4a0

COPY --from=ospo /usr/src /usr/src

Expand All @@ -64,7 +64,9 @@ RUN apt-get update && \
openssh-server \
s6 \
sqlite3 \
gnupg
gnupg \
&& apt-get install -y --only-upgrade perl zlib1g \
&& rm -rf /var/lib/apt/lists/*

RUN ln -s /usr/lib/x86_64-linux-musl/libc.so /lib/libc.musl-x86_64.so.1 \
&& ssh-keygen -A \
Expand Down
6 changes: 4 additions & 2 deletions docker/gitea/templates/Dockerfile.template
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ RUN mkdir -p /usr/src/licenses \
&& /download-ref-repos.sh /source_code.txt /usr/src

#Build stage
FROM docker.io/golang:bookworm AS build-env
FROM docker.io/library/golang:{{ $golang.Version }}-bookworm AS build-env

ARG GOPROXY
ENV GOPROXY ${GOPROXY:-direct}
Expand Down Expand Up @@ -68,7 +68,9 @@ RUN apt-get update && \
openssh-server \
s6 \
sqlite3 \
gnupg
gnupg \
&& apt-get install -y --only-upgrade perl zlib1g \
&& rm -rf /var/lib/apt/lists/*

RUN ln -s /usr/lib/x86_64-linux-musl/libc.so /lib/libc.musl-x86_64.so.1 \
&& ssh-keygen -A \
Expand Down
12 changes: 6 additions & 6 deletions docker/gitea/versions.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,12 +27,12 @@ versions:
- key: com.googleapis.cloudmarketplace.product.service.name
value: services/83c38401-9081-4bfd-8d88-f247f9c37ce9.cloudpartnerservices.goog
dir: 1/debian12/1.25
from: marketplace.gcr.io/google/debian12@sha256:f13f9826c524466f844e74534b8add32f51acd2be428b5dee782fe9086e59861
from: marketplace.gcr.io/google/debian12@sha256:c2a5eb3516da4c3bb0cf2d6fea739bd7b2dc7b1ac444b5fbd7c4def2aa57d4a0
packages:
gitea:
version: '1.25'
golang:
version: '1.23'
version: '1.25'
nodejs:
major: '22'
repo: gitea1
Expand All @@ -56,12 +56,12 @@ versions:
- key: com.googleapis.cloudmarketplace.product.service.name
value: services/83c38401-9081-4bfd-8d88-f247f9c37ce9.cloudpartnerservices.goog
dir: 1/debian12/1.23
from: marketplace.gcr.io/google/debian12@sha256:f13f9826c524466f844e74534b8add32f51acd2be428b5dee782fe9086e59861
from: marketplace.gcr.io/google/debian12@sha256:c2a5eb3516da4c3bb0cf2d6fea739bd7b2dc7b1ac444b5fbd7c4def2aa57d4a0
packages:
gitea:
version: '1.23'
golang:
version: '1.23'
version: '1.25'
nodejs:
major: '20'
repo: gitea1
Expand All @@ -82,12 +82,12 @@ versions:
- key: com.googleapis.cloudmarketplace.product.service.name
value: services/83c38401-9081-4bfd-8d88-f247f9c37ce9.cloudpartnerservices.goog
dir: 1/debian12/1.22
from: marketplace.gcr.io/google/debian12@sha256:f13f9826c524466f844e74534b8add32f51acd2be428b5dee782fe9086e59861
from: marketplace.gcr.io/google/debian12@sha256:c2a5eb3516da4c3bb0cf2d6fea739bd7b2dc7b1ac444b5fbd7c4def2aa57d4a0
packages:
gitea:
version: '1.22'
golang:
version: '1.23'
version: '1.25'
nodejs:
major: '20'
repo: gitea1
Expand Down
Loading