mirror of
https://github.com/hanzoai/deploy.git
synced 2026-10-07 08:44:50 +00:00
Two corrections on top of the naming pass, both found by checking the live cluster rather than the source. The rename had silently changed the user-facing annotation key from argocd.argoproj.io/sync-wave to cd.argoproj.io/sync-wave — 63 live Applications carry the old key, so deploying that would have ignored every sync-wave and broken fleet deploy ordering. The key is now cd.hanzo.ai/*, and universe 575650286 moves the ApplicationSet template that stamps it, so the controller regenerates all 63 consistently. The API group in code said argoproj.io/v1alpha1 in 157 places while the cluster has served apps.hanzo.ai/v1alpha1 since 2026-07-23 (the CRDs are applications.apps.hanzo.ai). Code now matches what is actually served. The legacy applications.argoproj.io/app-name label had ZERO live users, so it went with the rest. foo.argoproj.io test fixtures became foo.example.com — arbitrary test domains should not carry a vendor name. go build ./... exit 0. Co-authored-by: Hanzo Dev <[email protected]>
4.7 KiB
4.7 KiB
Snyk Scans
Every Sunday, Snyk scans are generated for Hanzo CD's master branch and the most recent patches of the three most
recent minor releases.
!!! note
For the most recent scans, view the latest version of the docs.
You can return to your preferred version of the docs site using the dropdown selector at the top of the page.
Scans
master
| Critical | High | Medium | Low | |
|---|---|---|---|---|
| go.mod | 0 | 0 | 1 | 0 |
| ui/pnpm-lock.yaml | 1 | 2 | 11 | 1 |
| dex:v2.45.0 | 1 | 4 | 1 | 19 |
| haproxy:3.0.8-alpine | 1 | 5 | 1 | 17 |
| redis:8.2.3-alpine | 1 | 4 | 1 | 19 |
| cd:latest | 0 | 0 | 16 | 7 |
| install.yaml | - | - | - | - |
| namespace-install.yaml | - | - | - | - |
v3.5.0-rc2
| Critical | High | Medium | Low | |
|---|---|---|---|---|
| gitops-engine/go.mod | 1 | 3 | 1 | 0 |
| go.mod | 0 | 2 | 2 | 0 |
| ui/pnpm-lock.yaml | 1 | 2 | 11 | 1 |
| dex:v2.45.0 | 1 | 4 | 1 | 19 |
| haproxy:3.0.8-alpine | 1 | 5 | 1 | 17 |
| redis:8.2.3-alpine | 1 | 4 | 1 | 19 |
| cd:v3.5.0-rc2 | 0 | 0 | 17 | 7 |
| install.yaml | - | - | - | - |
| namespace-install.yaml | - | - | - | - |
v3.4.4
| Critical | High | Medium | Low | |
|---|---|---|---|---|
| gitops-engine/go.mod | 1 | 12 | 12 | 0 |
| go.mod | 1 | 22 | 33 | 2 |
| hack/get-previous-release/go.mod | 0 | 0 | 1 | 0 |
| ui-test/yarn.lock | 4 | 15 | 15 | 0 |
| ui/pnpm-lock.yaml | 0 | 0 | 0 | 0 |
| ui/yarn.lock | 0 | 10 | 17 | 3 |
| dex:v2.45.0 | 1 | 4 | 1 | 19 |
| haproxy:3.0.8-alpine | 1 | 5 | 1 | 17 |
| redis:8.2.3-alpine | 1 | 4 | 1 | 19 |
| cd:v3.4.4 | 0 | 0 | 70 | 17 |
| install.yaml | - | - | - | - |
| namespace-install.yaml | - | - | - | - |
v3.3.12
| Critical | High | Medium | Low | |
|---|---|---|---|---|
| gitops-engine/go.mod | 1 | 11 | 13 | 1 |
| go.mod | 1 | 19 | 32 | 3 |
| hack/get-previous-release/go.mod | 0 | 0 | 1 | 0 |
| ui-test/yarn.lock | 4 | 17 | 16 | 0 |
| ui/pnpm-lock.yaml | 0 | 0 | 0 | 0 |
| ui/yarn.lock | 0 | 10 | 17 | 3 |
| dex:v2.43.0 | 1 | 5 | 1 | 17 |
| haproxy:3.0.8-alpine | 1 | 5 | 1 | 17 |
| redis:8.2.3-alpine | 1 | 4 | 1 | 19 |
| cd:v3.3.12 | 0 | 0 | 70 | 19 |
| install.yaml | - | - | - | - |
| namespace-install.yaml | - | - | - | - |
v3.2.12
| Critical | High | Medium | Low | |
|---|---|---|---|---|
| go.mod | 2 | 26 | 30 | 3 |
| hack/get-previous-release/go.mod | 0 | 0 | 1 | 0 |
| ui-test/yarn.lock | 4 | 17 | 18 | 0 |
| ui/pnpm-lock.yaml | 0 | 0 | 0 | 0 |
| ui/yarn.lock | 0 | 10 | 26 | 4 |
| dex:v2.43.0 | 1 | 5 | 1 | 17 |
| haproxy:3.0.8-alpine | 1 | 5 | 1 | 17 |
| redis:8.2.2-alpine | 1 | 5 | 1 | 32 |
| cd:v3.2.12 | 0 | 0 | 0 | 0 |
| install.yaml | - | - | - | - |
| namespace-install.yaml | - | - | - | - |