chore: Pin golang to 1.17 to avoid CVEs in docker image (argoproj#1920)

Signed-off-by: Benoit Duverger <[email protected]>
premadk · Apr 11, 2022 · 633892d · 633892d
1 parent 589e896
commit 633892d
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -119,7 +119,7 @@ jobs:
       - name: Setup Golang
         uses: actions/setup-go@v2
         with:
-          go-version: 1.17.6
+          go-version: 1.17
 
       - name: Generate release artifacts
         run: |

diff --git a/Dockerfile b/Dockerfile
@@ -3,7 +3,7 @@
 # Initial stage which pulls prepares build dependencies and CLI tooling we need for our final image
 # Also used as the image in CI jobs so needs all dependencies
 ####################################################################################################
-FROM --platform=$BUILDPLATFORM golang:1.17.6 as builder
+FROM --platform=$BUILDPLATFORM golang:1.17 as builder
 
 RUN apt-get update && apt-get install -y \
     wget \
@@ -40,7 +40,7 @@ RUN NODE_ENV='production' yarn build
 ####################################################################################################
 # Rollout Controller Build stage which performs the actual build of argo-rollouts binaries
 ####################################################################################################
-FROM --platform=$BUILDPLATFORM golang:1.17.6 as argo-rollouts-build
+FROM --platform=$BUILDPLATFORM golang:1.17 as argo-rollouts-build
 
 WORKDIR /go/src/github.com/argoproj/argo-rollouts
 

diff --git a/Dockerfile.dev b/Dockerfile.dev
@@ -1,7 +1,7 @@
 ####################################################################################################
 # argo-rollouts-dev
 ####################################################################################################
-FROM golang:1.17.6 as builder
+FROM golang:1.17 as builder
 
 RUN apt-get update && apt-get install -y \
     ca-certificates && \