hpvd commented on PR #299:
URL: 
https://github.com/apache/pulsar-helm-chart/pull/299#issuecomment-1278701720

   just did the same check for the proposed stack at artifacthub.
   
   There are (like in every project) some vulnerabilities, but
   - much fewer than we have today
   - no damn old ones
   - most of them could be fixed by minor version bumps of their dependencies
   - and they are moving fast
   
   
![2022-10-14_10h55_33](https://user-images.githubusercontent.com/5681880/195806288-507d1c74-db01-4ccd-b76c-19fd0db32d00.png)
   
   see 
https://artifacthub.io/packages/helm/prometheus-community/kube-prometheus-stack?modal=security-report
   
   
   
   -> so it looks fine to use it.
   
   Maybe one could point their community to the general view of their security 
scan results by opening an issue...


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to