Skip to content

chore(marketplace): build MinIO with fixed Go toolchain - #1

Closed
inkme9 wants to merge 1 commit into
vendor/RELEASE.2025-10-15T17-29-55Zfrom
release/2025-10-15-go1.25.9
Closed

inkme9 wants to merge 1 commit into
vendor/RELEASE.2025-10-15T17-29-55Zfrom
release/2025-10-15-go1.25.9

Conversation

@inkme9

@inkme9 inkme9 commented Apr 14, 2026

Copy link
Copy Markdown
Contributor

Why

GCP Marketplace vulnerability scanning flags the current MinIO image because its binary was built with a vulnerable Go toolchain.

What

  • Add a Marketplace-specific Dockerfile that rebuilds the same MinIO release with Go 1.25.9.
  • Disable upstream default GitHub workflows in this private fork.
  • Add an SBOM and vulnerability scan workflow matching the existing postgres fork pattern.

@inkme9 inkme9 self-assigned this Apr 14, 2026
@inkme9
inkme9 marked this pull request as ready for review April 14, 2026 06:40
@inkme9 inkme9 closed this Jun 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant