Repository navigation
[container-image-scan] Container findings for ghcr.io/github/gh-aw-firewall/squid:0.27.44 #52652
Description
Activity
- added a parent issue
on Aug 15, 2026 - linked a pull request that will close this issueAdd regression guard for vulnerable gh-aw-firewall squid 0.27.44 container pin #52939
on Aug 15, 2026 🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · gpt54 · 3.38 AIC · ⌖ 7.6 AIC · ⊞ 9.7K · ◷
Overview
Image:
ghcr.io/github/gh-aw-firewall/squid:0.27.44— pinned reference:ghcr.io/github/gh-aw-firewall/squid:0.27.44@sha256:83e48bbe12c634be8c228a576832fe45f66c529ac3659db92bddbcf2eeb6d627Grype found: 14 High, 8 Medium (0 Critical/Low) across 63 packages. Grant found 37 license policy violations.
Key metrics
High severity vulnerabilities
14 High findings — all bind-libs/bind-tools@9.20.24-r0
Medium vulnerabilities
8 Medium findings
Additional lower-severity advisories in the Alpine base package set (squid/bind dependency chain). See raw scan log at
/tmp/gh-aw/agent/image-scan/compile-output.txt(grepgh-aw-firewall/squid:0.27.44) for full detail.License policy violations
37 rejected/unknown licenses
Alpine base-package
GPL-2.0-only/MPL-2.0family licenses (squid, bind, and Alpine baselayout dependencies).Remediation
bind-libs/bind-toolsto >=9.20.26-r0 to resolve all 14 High CVEs in one step.--force-refresh-container-pinsrun is the default remediation path once the fixed Alpine package set is published.