containerd / containerd/nerdctl
CI: containerd-sha is not verified (only affects tests)
Open
area/ci
bug
priority/high
- Dominant language
- Go
- Stars
- 10.4k
- Forks
- 826
- Avg merge
- 1d 23h
- Merged PRs (30d)
- 44
Description
https://github.com/containerd/nerdctl/blob/bf9d3d28861489ed27c20973348bc43fb9dba771/.github/workflows/workflow-test.yml#L149-L151
The sha256 value does not seem verified in the CI, as the value seems taken from v2.2.0-rc.0, not from v2.2.0: https://github.com/containerd/containerd/releases/tag/v2.2.0-rc.0
This issue only affects the tests, so I'm not treating this as a vulnerability.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.