UNCLASSIFIED - NO CUI

Skip to content
Snippets Groups Projects
New look: Off

chore(findings): opensource/grafana/tempo

    • Closed Issue created by Ghost User @ghost

    Summary

    opensource/grafana/tempo has 1 new findings discovered during continuous monitoring.

    Information can be found in the VAT located here: https://vat.dso.mil/vat/image?imageName=opensource/grafana/tempo&tag=2.5.0&branch=master

    id source severity package
    GHSA-m5vv-6r4h-3vj9 Twistlock CVE Medium github.com/Azure/azure-sdk-for-go/sdk/azidentity-v1.4.0

    More information can be found in the VAT located here: https://vat.dso.mil/vat/image?imageName=opensource/grafana/tempo&tag=2.5.0&branch=master

    Tasks

    Contributor:

    • Provide justifications for findings in the VAT (docs)
    • Apply the StatusVerification label to this issue and wait for feedback

    Iron Bank:

    • Review findings and justifications

    Note: If the above process is rejected for any reason, the Verification label will be removed and the issue will be sent back to Open. Any comments will be listed in this issue for you to address. Once they have been addressed, you must re-add the Verification label.

    Questions?

    Contact the Iron Bank team by commenting on this issue with your questions or concerns. If you do not receive a response, add /cc @ironbank-notifications/onboarding.

    Additionally, Iron Bank hosts an AMA working session every Wednesday from 1630-1730EST to answer questions.

    2 of 3 checklist items completed · Edited
    To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information

    Child items 0

    • No child items are currently assigned. Use child items to break down this issue into smaller parts.

    Activity

    Please register or sign in to reply

    UNCLASSIFIED - NO CUI