From e3cb963df33126b6c4a5a29cff6ddc17c8533522 Mon Sep 17 00:00:00 2001 From: Adar Zandberg Date: Wed, 30 Sep 2026 14:47:42 +0300 Subject: [PATCH 1/2] AST-154825 - Bump containers-syft-packages-extractor to v1.0.28 --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index 9eec06f4..02dc83ab 100644 --- a/go.mod +++ b/go.mod @@ -77,7 +77,7 @@ require ( github.com/BobuSumisu/aho-corasick v1.0.3 // indirect github.com/BurntSushi/toml v1.6.0 // indirect github.com/Checkmarx/containers-images-extractor v1.0.22 - github.com/Checkmarx/containers-syft-packages-extractor v1.0.27 + github.com/Checkmarx/containers-syft-packages-extractor v1.0.28 github.com/CycloneDX/cyclonedx-go v0.10.0 // indirect github.com/DataDog/zstd v1.5.6 // indirect github.com/Masterminds/goutils v1.1.1 // indirect diff --git a/go.sum b/go.sum index 07a1cdf4..d8a202a4 100644 --- a/go.sum +++ b/go.sum @@ -71,8 +71,8 @@ github.com/Checkmarx/containers-images-extractor v1.0.22 h1:kJZgwk28LwJZ7Xky+kzw github.com/Checkmarx/containers-images-extractor v1.0.22/go.mod h1:HyzVb8TtTDf56hGlSakalPXtzjJ6VhTYe9fmAcOS+V8= github.com/Checkmarx/containers-resolver v1.0.37 h1:VkLuw8QXt04VvdWzjfoTHAqC7imizUp3fvLaTRRmHYs= github.com/Checkmarx/containers-resolver v1.0.37/go.mod h1:aFcQhIKw98lYzh9Wl6LX11WRa3OarixFnx1IR7uMj9U= -github.com/Checkmarx/containers-syft-packages-extractor v1.0.27 h1:7wvrAiiXFGyd4C6jw90Sq35v1otofcy1yHtvzINV7tc= -github.com/Checkmarx/containers-syft-packages-extractor v1.0.27/go.mod h1:OPGYISPnKtVFl2mZrClErv83ZLjUPKjdQQsXLmx++oY= +github.com/Checkmarx/containers-syft-packages-extractor v1.0.28 h1:Eh34cC1yeBqEZHmZbqNMHvZYILDoB2ZcEo+Icr7NHTM= +github.com/Checkmarx/containers-syft-packages-extractor v1.0.28/go.mod h1:J4GeT3ymIilb6LRLumovqQ/wnouwN84Jldsbnsc9LHA= github.com/Checkmarx/containers-types v1.0.9 h1:LbHDj9LZ0x3f28wDx398WC19sw0U0EfEewHMLStBwvs= github.com/Checkmarx/containers-types v1.0.9/go.mod h1:KR0w8XCosq3+6jRCfQrH7i//Nj2u11qaUJM62CREFZA= github.com/Checkmarx/gen-ai-prompts v0.0.0-20240807143411-708ceec12b63 h1:SCuTcE+CFvgjbIxUNL8rsdB2sAhfuNx85HvxImKta3g= From 5d627c6508a6d1eff109ea29de048c06e3face2d Mon Sep 17 00:00:00 2001 From: Adar Zandberg Date: Wed, 30 Sep 2026 14:54:04 +0300 Subject: [PATCH 2/2] AST-154825 - fix CVE-2026-53493 by bumping containerd to v1.7.36 --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index 02dc83ab..9a18754d 100644 --- a/go.mod +++ b/go.mod @@ -121,7 +121,7 @@ require ( github.com/charmbracelet/x/term v0.2.2 // indirect github.com/cloudflare/circl v1.6.5 // indirect github.com/containerd/cgroups/v3 v3.1.3 // indirect - github.com/containerd/containerd v1.7.35 // indirect + github.com/containerd/containerd v1.7.36 // indirect github.com/containerd/containerd/api v1.10.0 // indirect github.com/containerd/continuity v0.5.0 // indirect github.com/containerd/errdefs v1.0.0 // indirect diff --git a/go.sum b/go.sum index d8a202a4..d6c9101c 100644 --- a/go.sum +++ b/go.sum @@ -255,8 +255,8 @@ github.com/cncf/xds/go v0.0.0-20211011173535-cb28da3451f1/go.mod h1:eXthEFrGJvWH github.com/cncf/xds/go v0.0.0-20211130200136-a8f946100490/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs= github.com/containerd/cgroups/v3 v3.1.3 h1:eUNflyMddm18+yrDmZPn3jI7C5hJ9ahABE5q6dyLYXQ= github.com/containerd/cgroups/v3 v3.1.3/go.mod h1:PKZ2AcWmSBsY/tJUVhtS/rluX0b1uq1GmPO1ElCmbOw= -github.com/containerd/containerd v1.7.35 h1:7AU2T1qI2OdNBmKkreWZ7kASHUNFItN5Hgejd9sY938= -github.com/containerd/containerd v1.7.35/go.mod h1:ozI//0TomTCLPhQREnx0IXDIQMg+Fk7yTtg9fNvU8EQ= +github.com/containerd/containerd v1.7.36 h1:HyMsOG5kmp1LQsGzqwI6Ts06T4VpYZbszfDZYB0bW5w= +github.com/containerd/containerd v1.7.36/go.mod h1:ozI//0TomTCLPhQREnx0IXDIQMg+Fk7yTtg9fNvU8EQ= github.com/containerd/containerd/api v1.10.0 h1:5n0oHYVBwN4VhoX9fFykCV9dF1/BvAXeg2F8W6UYq1o= github.com/containerd/containerd/api v1.10.0/go.mod h1:NBm1OAk8ZL+LG8R0ceObGxT5hbUYj7CzTmR3xh0DlMM= github.com/containerd/continuity v0.5.0 h1:7a85HZpCSs+1Zps0Ee3DPSuAWY+0SJM1JNM51nlEVDg=