From f7928f465e783caec0fc4b90314e5a9cd4304e28 Mon Sep 17 00:00:00 2001 From: techize Date: Mon, 26 Oct 2026 09:24:37 +0000 Subject: [PATCH] fix(github-runner): move off Ubuntu 20.04 to debian-trixie pinned by digest (Brotli CVE-2026-111497) --- infrastructure/k8s/github-runner/deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/infrastructure/k8s/github-runner/deployment.yaml b/infrastructure/k8s/github-runner/deployment.yaml index f5af55e8..4731129f 100644 --- a/infrastructure/k8s/github-runner/deployment.yaml +++ b/infrastructure/k8s/github-runner/deployment.yaml @@ -51,7 +51,7 @@ spec: containers: # GitHub Actions Runner - name: runner - image: registry.techize.co.uk/dockerhub-cache/myoung34/github-runner:latest + image: registry.techize.co.uk/dockerhub-cache/myoung34/github-runner:debian-trixie@sha256:63aaa7e09f4e0a83ccf0a279a6f5541d25f48729df1a4cbfe7d600c90610b1e4 # runner 2.338.1, node24 v24.22.1, libbrotli1 1.1.0-2+deb13u1 (CVE-2026-111497) imagePullPolicy: Always envFrom: - configMapRef: