Skip to content

Images with Perl 5.8..5.24 are built with old version of git #100

Closed
@atoomic

Description

@atoomic

The docker images from 5.24 to 5.8 (and probably older) are providing a git version not supported anymore by GitHub
We should consider rebuilding all these images with an updated distro.

When trying to use these images to smoke Perl distro for example p5-TOML-XS here, we can see that the actions/checkout@v2 fallback to using the GitHub REST API instead of using git binary directly....

We can assume that git < 2.18 has some CVEs that we do not want to use...
To create a local Git repository instead, add Git 2.18 or higher to the PATH

actions/checkout output

Run actions/checkout@v2
/usr/bin/docker exec  18b7c324aeb62970e6c428445947204a2c2b0def760b624299cbca1e11e2dae8 sh -c "cat /etc/*release | grep ^ID"
Syncing repository: FGasper/p5-TOML-XS
Getting Git version info
Deleting the contents of '/__w/p5-TOML-XS/p5-TOML-XS'
The repository will be downloaded using the GitHub REST API
To create a local Git repository instead, add Git 2.18 or higher to the PATH
Downloading the archive
Writing archive to disk
Extracting the archive
/bin/tar xz -C /__w/p5-TOML-XS/p5-TOML-XS/2c9a3eb2-f909-4461-b74d-60632e3ee131 -f /__w/p5-TOML-XS/p5-TOML-XS/2c9a3eb2-f909-4461-b74d-60632e3ee131.tar.gz
Resolved version FGasper-p5-TOML-XS-6d72200

copy: @FGasper / @oalders

discussed here Perl/docker-perl-tester#18

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions