UNCLASSIFIED - NO CUI

latest image failing trivy scan on harbor

Hello,

I have pulled the harbor docker image

docker pull registry1.dso.mil/ironbank/bitnami/openldap:latest

iand then running a trivy scan for vulnerabilities.

trivy image registry1.dso.mil/ironbank/bitnami/openldap:latest

....

opt/bitnami/common/bin/gosu (gobinary)

Total: 82 (UNKNOWN: 0, LOW: 2, MEDIUM: 36, HIGH: 41, CRITICAL: 3)

....

Looking at Harbor, the last time the image was pushed was on 7/30/25. Are there plans to update the image? I have been searching for an IronBank LDAP image for our project and am open to other options, but the two IronBank LDAP images I found on Harbor fail the Trivy scan. Here are the images on Harbor that I have tried but failed Trivy scan.

docker pull registry1.dso.mil/ironbank/opensource/openldap:latest

docker pull registry1.dso.mil/ironbank/bitnami/openldap:latest

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information