kubernetes-csi / csi-driver-nfs

78%

master: 79%

LAST BUILD ON BRANCH cve-3.1

branch: cve-3.1

CHANGE BRANCH

x

Reset

Sync Branches

• cve-3.1
• 467-csi-snapshotter-without-crd
• Add-optional-extra-labels-to-k8s-resources
• CVE-2018-25032
• CVE-2021
• CVE-2021-25743
• CVE-2021-3121
• CVE-2021-38561
• CVE-2022-0778
• CVE-2022-1271
• CVE-2022-1996
• CVE-2022-29526
• CVE-2022-3294
• CVE-2022-41717
• CVE-2022-41723
• CVE-2023-2431
• CVE-2023-48795
• CVE-2023-5528
• CVE-2024-3177
• CVE-2024-45336
• CVE-2024-45337
• CVE-2024-5321
• CVE-2025-0426
• CVE-2025-22866
• CVE-2025-22871-trivy
• CVE-2025-4673
• CVE-2025-5187
• CVE-2025-52881
• CleanupMountPoint
• GHSA-xr7q-jx4m-x55m
• NodeUnpublishVolume/NotFound
• ReadWriteOnceWithFSType
• ValidateVolumeCapabilities-fix
• add-CriticalAddonsOnly-toleration
• add-arch
• add-artifacthub-repo
• add-baserepo
• add-chart-versions
• add-dependabot
• add-helm-chart
• add-nfs-server-ns
• add-pv-patch-permission
• add-seccompProfile
• add-support-doc
• add-ubuntu-action
• add_example_usage
• add_lock
• add_runonmaster
• add_snapshot_doc
• add_timeout_mount
• add_volume_cloning_doc
• affinity-nodeselector
• allowVolumeExpansion-doc
• alternative-driver-name
• amrv7
• andyzhangx-patch-1
• baseimage-bookworm
• bookworm-v1.0.4
• broken-fix
• bugfix-missing-imagePullSecrets
• bump
• bump-protobuf
• bump_prometheus_client
• change-base-image
• change-test-sc
• change-volumeid-format
• chart-sc-indent
• check-before-chmod
• chmod-logging
• cleanup-todo
• codespell
• control-plane
• controller-hostnetwork
• copilot/add-multiple-storageclasses-support
• create-dir
• create-respect-mountoption
• create_snapshotclass
• csi-driver-nfs-1
• csi-node-driver-registrar-v2.6.3
• csi-node-sa
• csi-provisioner-5.0.2
• csi-sidecar-upgrade
• csi-snapshot-controller-bug
• csidriver-v1.22
• cut-v3.0.0
• cut-v3.0.0-2
• cut-v3.1.0
• cut-v4.0.0
• cut-v4.1.0
• cut-v4.10.0
• cut-v4.11.0
• cut-v4.12.0
• cut-v4.12.1-2
• cut-v4.12.1-3
• cut-v4.2.0
• cut-v4.3.0
• cut-v4.4.0
• cut-v4.5.0
• cut-v4.6.0
• cut-v4.7.0
• cut-v4.8.0
• cut-v4.9.0
• cve
• cve-3.0
• daemonset-nfs-ephemeral-example
• debian-base
• deleteRootSubDir
• deletevolume-mountoptions
• dependabot/docker/build-image/debian-base-bookworm-v1.0.5
• dependabot/docker/build-image/debian-base-bookworm-v1.0.6
• dependabot/github_actions/actions/checkout-3
• dependabot/github_actions/actions/checkout-4
• dependabot/github_actions/actions/checkout-5
• dependabot/github_actions/actions/setup-go-4
• dependabot/github_actions/actions/setup-go-5
• dependabot/github_actions/actions/setup-go-6
• dependabot/github_actions/github/codeql-action-2
• dependabot/github_actions/github/codeql-action-3
• dependabot/github_actions/github/codeql-action-4
• dependabot/github_actions/golangci/golangci-lint-action-4
• dependabot/github_actions/golangci/golangci-lint-action-5
• dependabot/github_actions/golangci/golangci-lint-action-6
• dependabot/github_actions/golangci/golangci-lint-action-7
• dependabot/github_actions/golangci/golangci-lint-action-8
• dependabot/github_actions/golangci/golangci-lint-action-9
• dependabot/go_modules/github.com/container-storage-interface/spec-1.8.0
• dependabot/go_modules/github.com/onsi/ginkgo-1.16.5
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.12.1
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.13.0
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.13.1
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.13.2
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.14.0
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.16.0
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.17.0
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.17.1
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.17.2
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.17.3
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.18.0
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.19.0
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.19.1
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.20.0
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.20.1
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.20.2
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.21.0
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.22.1
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.22.2
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.23.0
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.23.1
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.23.2
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.23.3
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.23.4
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.24.0
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.25.0
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.25.1
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.25.3
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.27.1
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.27.2
• dependabot/go_modules/github.com/onsi/gomega-1.27.10
• dependabot/go_modules/github.com/onsi/gomega-1.27.6
• dependabot/go_modules/github.com/onsi/gomega-1.27.8
• dependabot/go_modules/github.com/onsi/gomega-1.28.0
• dependabot/go_modules/github.com/onsi/gomega-1.28.1
• dependabot/go_modules/github.com/onsi/gomega-1.29.0
• dependabot/go_modules/github.com/onsi/gomega-1.30.0
• dependabot/go_modules/github.com/onsi/gomega-1.31.1
• dependabot/go_modules/github.com/onsi/gomega-1.32.0
• dependabot/go_modules/github.com/onsi/gomega-1.33.1
• dependabot/go_modules/github.com/onsi/gomega-1.34.0
• dependabot/go_modules/github.com/onsi/gomega-1.34.1
• dependabot/go_modules/github.com/onsi/gomega-1.34.2
• dependabot/go_modules/github.com/onsi/gomega-1.35.0
• dependabot/go_modules/github.com/onsi/gomega-1.35.1
• dependabot/go_modules/github.com/onsi/gomega-1.36.0
• dependabot/go_modules/github.com/onsi/gomega-1.36.1
• dependabot/go_modules/github.com/onsi/gomega-1.36.2
• dependabot/go_modules/github.com/onsi/gomega-1.36.3
• dependabot/go_modules/github.com/onsi/gomega-1.37.0
• dependabot/go_modules/github.com/onsi/gomega-1.38.0
• dependabot/go_modules/github.com/onsi/gomega-1.38.1
• dependabot/go_modules/github.com/onsi/gomega-1.38.2
• dependabot/go_modules/github.com/pborman/uuid-1.2.1
• dependabot/go_modules/github.com/stretchr/testify-1.10.0
• dependabot/go_modules/github.com/stretchr/testify-1.11.1
• dependabot/go_modules/github.com/stretchr/testify-1.8.4
• dependabot/go_modules/github.com/stretchr/testify-1.9.0
• dependabot/go_modules/golang.org/x/mod-0.23.0
• dependabot/go_modules/golang.org/x/mod-0.24.0
• dependabot/go_modules/golang.org/x/mod-0.25.0
• dependabot/go_modules/golang.org/x/mod-0.26.0
• dependabot/go_modules/golang.org/x/mod-0.27.0
• dependabot/go_modules/golang.org/x/mod-0.28.0
• dependabot/go_modules/golang.org/x/mod-0.29.0
• dependabot/go_modules/golang.org/x/net-0.11.0
• dependabot/go_modules/golang.org/x/net-0.12.0
• dependabot/go_modules/golang.org/x/net-0.13.0
• dependabot/go_modules/golang.org/x/net-0.14.0
• dependabot/go_modules/golang.org/x/net-0.15.0
• dependabot/go_modules/golang.org/x/net-0.16.0
• dependabot/go_modules/golang.org/x/net-0.17.0
• dependabot/go_modules/golang.org/x/net-0.18.0
• dependabot/go_modules/golang.org/x/net-0.19.0
• dependabot/go_modules/golang.org/x/net-0.20.0
• dependabot/go_modules/golang.org/x/net-0.21.0
• dependabot/go_modules/golang.org/x/net-0.22.0
• dependabot/go_modules/golang.org/x/net-0.23.0
• dependabot/go_modules/golang.org/x/net-0.24.0
• dependabot/go_modules/golang.org/x/net-0.25.0
• dependabot/go_modules/golang.org/x/net-0.26.0
• dependabot/go_modules/golang.org/x/net-0.27.0
• dependabot/go_modules/golang.org/x/net-0.28.0
• dependabot/go_modules/golang.org/x/net-0.29.0
• dependabot/go_modules/golang.org/x/net-0.30.0
• dependabot/go_modules/golang.org/x/net-0.31.0
• dependabot/go_modules/golang.org/x/net-0.32.0
• dependabot/go_modules/golang.org/x/net-0.33.0
• dependabot/go_modules/golang.org/x/net-0.34.0
• dependabot/go_modules/golang.org/x/net-0.35.0
• dependabot/go_modules/golang.org/x/net-0.36.0
• dependabot/go_modules/golang.org/x/net-0.37.0
• dependabot/go_modules/golang.org/x/net-0.38.0
• dependabot/go_modules/golang.org/x/net-0.39.0
• dependabot/go_modules/golang.org/x/net-0.40.0
• dependabot/go_modules/golang.org/x/net-0.41.0
• dependabot/go_modules/golang.org/x/net-0.42.0
• dependabot/go_modules/golang.org/x/net-0.43.0
• dependabot/go_modules/golang.org/x/net-0.44.0
• dependabot/go_modules/golang.org/x/net-0.45.0
• dependabot/go_modules/golang.org/x/net-0.46.0
• dependabot/go_modules/golang.org/x/net-0.47.0
• dependabot/go_modules/golang.org/x/net-0.9.0
• dependabot/go_modules/google.golang.org/grpc-1.56.2
• dependabot/go_modules/google.golang.org/grpc-1.57.0
• dependabot/go_modules/google.golang.org/grpc-1.58.0
• dependabot/go_modules/google.golang.org/grpc-1.58.1
• dependabot/go_modules/google.golang.org/grpc-1.58.2
• dependabot/go_modules/google.golang.org/grpc-1.58.3
• dependabot/go_modules/google.golang.org/grpc-1.59.0
• dependabot/go_modules/google.golang.org/grpc-1.60.0
• dependabot/go_modules/google.golang.org/grpc-1.60.1
• dependabot/go_modules/google.golang.org/grpc-1.61.0
• dependabot/go_modules/google.golang.org/grpc-1.62.0
• dependabot/go_modules/google.golang.org/grpc-1.62.1
• dependabot/go_modules/google.golang.org/grpc-1.63.0
• dependabot/go_modules/google.golang.org/grpc-1.63.2
• dependabot/go_modules/google.golang.org/grpc-1.64.0
• dependabot/go_modules/google.golang.org/grpc-1.66.0
• dependabot/go_modules/google.golang.org/grpc-1.66.1
• dependabot/go_modules/google.golang.org/grpc-1.66.2
• dependabot/go_modules/google.golang.org/grpc-1.67.0
• dependabot/go_modules/google.golang.org/grpc-1.67.1
• dependabot/go_modules/google.golang.org/grpc-1.68.0
• dependabot/go_modules/google.golang.org/grpc-1.68.1
• dependabot/go_modules/google.golang.org/grpc-1.69.0
• dependabot/go_modules/google.golang.org/grpc-1.69.2
• dependabot/go_modules/google.golang.org/grpc-1.69.4
• dependabot/go_modules/google.golang.org/grpc-1.70.0
• dependabot/go_modules/google.golang.org/grpc-1.71.0
• dependabot/go_modules/google.golang.org/grpc-1.71.1
• dependabot/go_modules/google.golang.org/grpc-1.72.0
• dependabot/go_modules/google.golang.org/grpc-1.72.1
• dependabot/go_modules/google.golang.org/grpc-1.72.2
• dependabot/go_modules/google.golang.org/grpc-1.73.0
• dependabot/go_modules/google.golang.org/grpc-1.74.0
• dependabot/go_modules/google.golang.org/grpc-1.74.2
• dependabot/go_modules/google.golang.org/grpc-1.75.0
• dependabot/go_modules/google.golang.org/grpc-1.75.1
• dependabot/go_modules/google.golang.org/grpc-1.76.0
• dependabot/go_modules/google.golang.org/protobuf-1.30.0
• dependabot/go_modules/google.golang.org/protobuf-1.31.0
• dependabot/go_modules/google.golang.org/protobuf-1.32.0
• dependabot/go_modules/google.golang.org/protobuf-1.34.0
• dependabot/go_modules/google.golang.org/protobuf-1.34.1
• dependabot/go_modules/google.golang.org/protobuf-1.34.2
• dependabot/go_modules/google.golang.org/protobuf-1.35.1
• dependabot/go_modules/google.golang.org/protobuf-1.35.2
• dependabot/go_modules/google.golang.org/protobuf-1.36.0
• dependabot/go_modules/google.golang.org/protobuf-1.36.1
• dependabot/go_modules/google.golang.org/protobuf-1.36.10
• dependabot/go_modules/google.golang.org/protobuf-1.36.2
• dependabot/go_modules/google.golang.org/protobuf-1.36.3
• dependabot/go_modules/google.golang.org/protobuf-1.36.4
• dependabot/go_modules/google.golang.org/protobuf-1.36.5
• dependabot/go_modules/google.golang.org/protobuf-1.36.6
• dependabot/go_modules/google.golang.org/protobuf-1.36.7
• dependabot/go_modules/google.golang.org/protobuf-1.36.9
• dependabot/go_modules/k8s-9471c3b1a3
• dependabot/go_modules/k8s-f326b39a94
• dependabot/go_modules/k8s.io/apimachinery-0.28.11
• dependabot/go_modules/k8s.io/apimachinery-0.28.5
• dependabot/go_modules/k8s.io/apimachinery-0.28.6
• dependabot/go_modules/k8s.io/apimachinery-0.28.7
• dependabot/go_modules/k8s.io/apimachinery-0.28.8
• dependabot/go_modules/k8s.io/client-go-0.28.10
• dependabot/go_modules/k8s.io/client-go-0.28.11
• dependabot/go_modules/k8s.io/client-go-0.28.12
• dependabot/go_modules/k8s.io/client-go-0.28.5
• dependabot/go_modules/k8s.io/client-go-0.28.6
• dependabot/go_modules/k8s.io/client-go-0.28.7
• dependabot/go_modules/k8s.io/client-go-0.28.8
• dependabot/go_modules/k8s.io/klog/v2-2.100.1
• dependabot/go_modules/k8s.io/klog/v2-2.110.1
• dependabot/go_modules/k8s.io/klog/v2-2.120.0
• dependabot/go_modules/k8s.io/klog/v2-2.120.1
• dependabot/go_modules/k8s.io/klog/v2-2.130.1
• dependabot/go_modules/k8s.io/kubernetes-1.28.11
• dependabot/go_modules/k8s.io/kubernetes-1.28.5
• dependabot/go_modules/k8s.io/kubernetes-1.28.6
• dependabot/go_modules/k8s.io/kubernetes-1.28.7
• dependabot/go_modules/k8s.io/mount-utils-0.29.0
• dependabot/go_modules/k8s.io/mount-utils-0.29.1
• dependabot/go_modules/k8s.io/mount-utils-0.29.2
• dependabot/go_modules/k8s.io/mount-utils-0.29.3
• dependabot/go_modules/k8s.io/mount-utils-0.29.4
• dependabot/go_modules/k8s.io/mount-utils-0.29.6
• dependabot/go_modules/k8s.io/mount-utils-0.29.7
• dependabot/go_modules/sigs.k8s.io/yaml-1.3.0
• dependabot/go_modules/sigs.k8s.io/yaml-1.4.0
• dependabot/go_modules/sigs.k8s.io/yaml-1.5.0
• dependabot/go_modules/sigs.k8s.io/yaml-1.6.0
• disable-archivedInternalVolumePath
• disable-inline-vol
• disable-nodestage
• disable-snapshot-controller-install
• disable_openapi_validation
• dl.k8s.io
• dnsPolicy
• dnspolicy-fix
• doc_fix
• done
• driver-registrar-v2.3
• dtumkur-release-tool-update
• e2e-subpath
• enable-action-all-branches
• enable-slow-tests
• enable-snapshot-sidecar
• enable-snapshot-sidecar-v4.4.0
• enable-spelling-boilerplate-check
• enable-spelling-boilerplate-prow-checks
• enable-volumeSnapshotClass-e2e
• enableSnapshotter
• ephemeral-storage
• expand-vol
• external-1.24.0
• external-e2e
• external-tests-1.21
• externel-tests-1.21
• feat/add-antiaffinity
• feat/kubeletDir
• feature-add-storageclass-to-helm-chart
• feature/on-delete-archive
• fix-CVE-2025-47907-failure
• fix-NodeGetVolumeStats-crash
• fix-affinity-chart
• fix-affinity-chart-4.10.0
• fix-archive-dir-error
• fix-archive-dir-error2
• fix-archive-subdir
• fix-buildx
• fix-cloud-build
• fix-codespell
• fix-delete-error-archived
• fix-doc-debug-cmd-issue
• fix-doc-typo
• fix-docs
• fix-drivername-sc
• fix-dup-mount
• fix-e2e
• fix-e2e-test
• fix-go-mod
• fix-golint
• fix-golint-error
• fix-golinter
• fix-goroutine-leak
• fix-goveralls
• fix-label-selector
• fix-leader-election-namespace
• fix-lint-error
• fix-logtostderr-panic
• fix-ondelete-config-no-assigned
• fix-org-name-in-links
• fix-push-images
• fix-readme-link
• fix-readonly-doc
• fix-remove-root-dir-issue
• fix-runOnControlPlane
• fix-runOnMaster
• fix-sdlib
• fix-snapshot-patch-issue
• fix-snapshot-rbac
• fix-snapshot-rbac2
• fix-spelling
• fix-support-dates
• fix-text-lib
• fix-tmp-mount-permission-4.8
• fix-tmp-path-mount-issue
• fix-tmp-path-mount-issue2
• fix-trivy2
• fix-v3.0.0-chart
• fix-version
• fix/GH-239
• fix_dynamic_allocation
• fix_snapshot_subpath
• fix_verify-examples
• forbid-invalid-parameters
• force-unmount
• fsgrouppolicy
• go-build-1.22.5
• go1.22
• go1.24
• helm-index-verify
• improve-test-cov
• increase-cpu-limits
• increase-memory-limit
• increase-retry-interval-max
• increase-snapshot-timeout
• inline-volume
• ipv6
• issue-165
• issues-131
• johnsimcall-csi-nfs-node-daemonset-serviceaccount
• k8s-1.23-lib
• klog
• kube-1.24
• libgmp10
• liveness
• liveness-linux
• liveness-probe
• liveness-probe-port
• loglevel
• master
• maxUnavailable
• mengzezhu/upgrade-golint-version
• mount-lock
• mount-utils
• mount-utils-enodev
• mountPermissions
• mountoptions-doc
• mountpermissions-fix
• nconnect
• nfsv3
• node-security-context
• node-serviceAccount
• ondelete_subdir
• oreissig.fix-helm-lint
• package
• parametrization-deploy-strategy
• parametrized-deploy-strategy
• patch-1
• pod-namespace-env
• ppc64le
• prio_class_value
• private/removeStatic
• propagate_host_mount_config
• prow-update-master
• readme-update
• reduce-logs
• refactor-verify-examples
• refine-bypass-chmod
• refine-doc
• refine-pv-doc
• refine-snapshot-deployment
• refs/tags/v3.0.0
• refs/tags/v3.1.0
• refs/tags/v4.0.0
• refs/tags/v4.1.0
• refs/tags/v4.11.0
• refs/tags/v4.12.0
• refs/tags/v4.12.1
• refs/tags/v4.2.0
• refs/tags/v4.3.0
• refs/tags/v4.4.0
• refs/tags/v4.5.0
• refs/tags/v4.6.0
• refs/tags/v4.7.0
• refs/tags/v4.8.0
• refs/tags/v4.9.0
• registrar-remove-probe
• registry.k8s.io
• release-3.0
• release-3.1
• release-4.0
• release-4.12
• release-4.9
• remove-cpu-limits2
• remove-getArchivedInternalVolumePath
• remove-group-dependabot
• remove-hard-option
• remove-livenessProbe
• remove-lock
• remove-mount-options-in-example
• remove-nconnect-option
• remove-parent-dir
• remove-podInfoOnMount
• remove-stale-archive
• remove-unnecessary-cve-packages
• rename-identityserver
• replica-one
• repo-change
• retornam/fix
• revert-readOnlyRootFilesystem
• runOnControlPlane
• runOnControlPlane-snapshot
• security-context
• securityContext
• semver-doc
• service-account-names
• set-big-limit
• share_folders
• sidecar-limits
• sidecar-update-20221103
• sidecar-version-upgrade
• snapshot-limits
• snapshot-mountOptions
• snapshot-v8.2.1
• snapshots_with_tarballs
• statfs-cache
• subDir
• subdir-metadata
• support-multi-sc
• switch-gcr-image
• switch-master-3.1.0
• switch-master-3.2.0
• switch-master-4.0.0
• switch-master-4.1.0
• switch-master-4.2.0
• tar
• test-gomod-check
• test-specific-image
• test-specific-image-4.9
• test_copy_vol_unit_tests
• test_coverage
• test_helm_repo
• tolerations
• trivy-go
• trivy-goversion
• update
• update-base-image
• update-chart-latest
• update-crypto
• update-csi-release-tools
• update-csi-release-tools2
• update-csi-release-tools2-4.12
• update-csi-release-tools2-4.12-2
• update-csi-release-tools3
• update-csi-release-tools5
• update-dependabot
• update-master-chart-version
• update-release-tools
• update-release-tools2
• update-release-tools3
• update-release-tools6
• update_release-tools2
• update_release-tools4
• upgrade
• upgrade-base-image
• upgrade-base-image2
• upgrade-csi-provisioner-v3.1.0
• upgrade-csi-sidecar-images
• upgrade-csi-spec
• upgrade-csi-test-5.3.1
• upgrade-k8s-1.28.4
• upgrade-k8s-lib
• upgrade-mount-utils
• upgrade-node-driver-registrar
• upgrade-provisioner-version
• upgrade-resizer
• upgrade-resizer-1.14.0
• upgrade-sidecar-images
• upgrade-sidecar-images2
• upgrade-sidecar-images3
• upgrade-sidecar-images4
• upgrade-sidecar-images5
• upgrade-sidecar-images6
• upgrade-sidecar-images7
• upgrade-sidecar-versions2
• upgrade-snapshot-6.2.2
• upgrade-snapshot-6.3.1
• upgrade-snapshot-v8.2.0
• upgrade-test-version
• upgrade_golangci_1.54
• use-http-endpoint
• useTarCommandInSnapshot
• ut
• verify-helm-chart-files
• verify-helm-chart2
• volumePrefix
• volume_to_volume_copy
• vulnerability-fix
• windows-ut
• windows_go_version
• workingMountDir
• zero-mountpermissions

fix: CVE issues in image build