Need clarification on security standards of microsoft/garnet image

[Pravin112113118]

Hi there,

I have carried out the trivy security scan for the microsoft/garnet image - ghcr.io/microsoft/garnet:latest.
However, I was reported with 400+ vulnerabilities for this image. Could you please clarify on the security impacts on using this image? Also. please let me know the vulnerable free version of microsoft/garnet.

Note: I have attached the security scan report.

Regards,
Pravinkumar D,
VAPT Engineer.
garnet-report.txt

[badrishc]

These issues were all related to the base OS image being used, unrelated to Garnet. The latest release (1.1.0) has updated the containers to the latest images, and you should no longer see most of it. If any are left, it is up to the upstream images to fix.

[Pravin112113118]

Hi,
I have scanned the image ghcr.io/microsoft/garnet:latest in the trivy scan. It reported the 12 alerts. Please check with the attached report & give your update. We await your response.

Garnet-1.1.0-trivyScan.txt
Regards,
Pravinkumar D,
VAPT Engineer.