Skip to content

fix security scan (rebalancer): remove python3 libraries#328

Merged
boddumanohar merged 2 commits into
mainfrom
dnf-remove-python3
Jul 15, 2026
Merged

fix security scan (rebalancer): remove python3 libraries#328
boddumanohar merged 2 commits into
mainfrom
dnf-remove-python3

Conversation

@boddumanohar

@boddumanohar boddumanohar commented Jul 14, 2026

Copy link
Copy Markdown
Member

security scan for rebalancer image is failing with this:

urllib3   1.26.19    2.6.3     python  GHSA-38jv-5279-wg99  High      2.7% (83rd)  2.1    
urllib3   1.26.19    2.6.0     python  GHSA-2xpw-w6gg-jr37  High      0.6% (46th)  0.5    
urllib3   1.26.19    2.6.0     python  GHSA-gm62-xv2j-4w53  High      0.6% (46th)  0.5    
urllib3   1.26.19    2.7.0     python  GHSA-qccp-gfcp-xxvc  High      0.5% (40th)  0.4    
idna      3.7        3.15      python  GHSA-65pc-fj4g-8rjx  Medium    0.4% (32nd)  0.2    
urllib3   1.26.19    2.5.0     python  GHSA-pq67-6m6q-mj2v  Medium    0.4% (32nd)  0.2    
requests  2.32.4     2.33.0    python  GHSA-gc5v-m9x4-r6x2  Medium    0.2% (7th)   < 0.1 

rebalancer is a golang binary. So it doesn't require these python packages.

tested this and have successful scan here:
https://github.com/simplyblock/simplyblock-operator/actions/runs/29334599877/job/87090590818


additionally have updated the slack message to show the component name

@boddumanohar boddumanohar changed the title fix security scan: remove python3 libraries fix security scan (rebalancer): remove python3 libraries Jul 14, 2026
@boddumanohar boddumanohar merged commit d7a5055 into main Jul 15, 2026
14 checks passed
@boddumanohar boddumanohar deleted the dnf-remove-python3 branch July 15, 2026 08:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants