From aea12a309efce589849590bc8eeb6e0b96939898 Mon Sep 17 00:00:00 2001 From: Roman Perekhod <2403905@gmail.com> Date: Thu, 20 Aug 2026 16:52:09 +0200 Subject: [PATCH 1/2] feat: add oCIS 8.0.8 image --- .github/workflows/main.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index dc74c85..b82fe93 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -62,7 +62,7 @@ jobs: trivy-ignore: "v8/8.1/.trivyignore" extra-tags: | 8.1 - - version: "8.0.7" + - version: "8.0.8" dir: "v8" trivy-ignore: "v8/8.0/.trivyignore" extra-tags: | From 8611bb14830fdda687af29dd7b0cfd1649c112c2 Mon Sep 17 00:00:00 2001 From: Roman Perekhod <2403905@gmail.com> Date: Fri, 21 Aug 2026 09:58:03 +0200 Subject: [PATCH 2/2] chore: unpdate .trivyignore --- v8/8.0/.trivyignore | 3 --- 1 file changed, 3 deletions(-) diff --git a/v8/8.0/.trivyignore b/v8/8.0/.trivyignore index a8a3b91..8ad70d6 100644 --- a/v8/8.0/.trivyignore +++ b/v8/8.0/.trivyignore @@ -1,4 +1 @@ # CVEs baked into the oCIS 8.0 binary (Go dependencies). Unfixable by this repo — requires an upstream owncloud/ocis release. Empty at release time; add entries only when a CVE is later disclosed in this already-released line. - -# github.com/go-git/go-git/v5 v5.19.1 (fixed in 5.19.2) — fixed in oCIS 8.2.0 -CVE-2026-71556 exp:2026-10-31