Problem to solve
Trivy image scanner is flagging the following CVEs for alpine-v18.3.1
CVE-2025-22868 type: Gobinary package: The Go Programming Language version: v0.18.0 fix version: 0.27.0
CVE-2025-46334 type: alpine package: git version: 2.49.0-r0 fix version: 2.49.1-r0
CVE-2025-46334 type: alpine package: git-init-template version: 2.49.0-r0 fix version: 2.49.1-r0
CVE-2025-47907 type: Gobinary package: stdlib version: 1.24.4 fix version: 1.24.6
CVE-2025-48384 type: Alpine package: git version: 2.49.0-r0 fix version: 2.49.1-r0
CVE-2025-48384 type: alpine package: git-init-template version: 2.49.0-r0 fix version: 2.49.1-r0
CVE-2025-48385 type: Alpine package: git version: 2.49.0-r0 fix version: 2.49.1-r0
CVE-2025-48385 type: alpine package: git-init-template version: 2.49.0-r0 fix version: 2.49.1-r0
Steps to reproduce
ran trivy scanner with latest trivy db on the image
Configuration
n/a
Versions
self-hosted runners
Versions