Skip to content

Sedai smart agent 1.4.41 pack added#202

Open
haribtw wants to merge 4 commits intospectrocloud:mainfrom
SedaiEngineering:sedai-smart-agent-1.4.41
Open

Sedai smart agent 1.4.41 pack added#202
haribtw wants to merge 4 commits intospectrocloud:mainfrom
SedaiEngineering:sedai-smart-agent-1.4.41

Conversation

@haribtw
Copy link

@haribtw haribtw commented Mar 23, 2026

Adding new Sedai Smart Agent pack - version 1.4.41

bulwark-spectrocloud[bot]
bulwark-spectrocloud bot reviewed Mar 23, 2026
View reviewed changes
Copy link

@bulwark-spectrocloud bulwark-spectrocloud bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ CVE scan completed successfully.

Scan Summary:

  • Total images scanned: 11
  • Clean images: 1
  • Images with CVEs: 10
  • Total CVEs found: 1039

🔴 Critical CVEs: 15
🟠 High CVEs: 110
🟡 Medium CVEs: 229
🟢 Low CVEs: 685

Images with CVEs:

  • public.ecr.aws/sedai_io/grafana/beyla:2.2.4: 35 CVEs (Critical: 1, High: 0, Medium: 0, Low: 34)
    Critical CVEs: CVE-2025-68121
  • public.ecr.aws/sedai_io/nvidia/dcgm-exporter:4.4.2-4.7.0-distroless: 91 CVEs (Critical: 4, High: 3, Medium: 7, Low: 77)
    Critical CVEs: CVE-2019-1010022, CVE-2025-68121
  • public.ecr.aws/sedai_io/prometheus/kube-state-metrics:v2.17.0: 30 CVEs (Critical: 1, High: 0, Medium: 2, Low: 27)
    Critical CVEs: CVE-2025-68121
  • public.ecr.aws/sedai_io/prometheus/node-exporter:v1.10.2: 15 CVEs (Critical: 1, High: 1, Medium: 0, Low: 13)
    Critical CVEs: CVE-2025-68121
  • public.ecr.aws/sedai_io/prometheus/prometheus-config-reloader:v0.87.0: 13 CVEs (Critical: 1, High: 0, Medium: 0, Low: 12)
    Critical CVEs: CVE-2025-68121
  • public.ecr.aws/sedai_io/prometheus/prometheus:v3.8.0: 31 CVEs (Critical: 2, High: 0, Medium: 0, Low: 29)
    Critical CVEs: CVE-2025-68121
  • public.ecr.aws/sedai_io/sedai-kube-spec-controller:0.0.4: 53 CVEs (Critical: 2, High: 3, Medium: 3, Low: 45)
    Critical CVEs: CVE-2019-1010022, CVE-2025-68121
  • public.ecr.aws/sedai_io/sedai-smart-agent-enroll:v3.1.11: 687 CVEs (Critical: 2, High: 96, Medium: 212, Low: 377)
    Critical CVEs: CVE-2019-1010022
  • public.ecr.aws/sedai_io/sedai-smart-agent:v1.25.20: 19 CVEs (Critical: 0, High: 3, Medium: 4, Low: 12)
  • public.ecr.aws/sedai_io/victoriametrics/victoria-metrics:v1.122.0: 65 CVEs (Critical: 1, High: 4, Medium: 1, Low: 59)
    Critical CVEs: CVE-2025-68121

⚠️ Scan Errors: 1 image(s) failed to scan

⚠️ Please review the CVE findings above and address critical/high severity issues before merging.

bulwark-spectrocloud[bot]
bulwark-spectrocloud bot reviewed Mar 24, 2026
View reviewed changes
Copy link

@bulwark-spectrocloud bulwark-spectrocloud bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ CVE scan completed successfully.

Scan Summary:

  • Total images scanned: 12
  • Clean images: 2
  • Images with CVEs: 10
  • Total CVEs found: 294

🔴 Critical CVEs: 11
🟠 High CVEs: 30
🟡 Medium CVEs: 31
🟢 Low CVEs: 222

Images with CVEs:

  • public.ecr.aws/sedai_io/grafana/alloy:v1.10.0: 99 CVEs (Critical: 1, High: 11, Medium: 8, Low: 79)
    Critical CVEs: CVE-2025-68121
  • public.ecr.aws/sedai_io/grafana/beyla:3.6.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • public.ecr.aws/sedai_io/nvidia/dcgm-exporter:4.5.2-4.8.1-distroless: 33 CVEs (Critical: 3, High: 2, Medium: 4, Low: 24)
    Critical CVEs: CVE-2019-1010022, CVE-2025-68121
  • public.ecr.aws/sedai_io/prometheus/kube-state-metrics:v2.18.0: 12 CVEs (Critical: 2, High: 1, Medium: 1, Low: 8)
    Critical CVEs: CVE-2025-68121, CVE-2026-33186
  • public.ecr.aws/sedai_io/prometheus/node-exporter:v1.10.2: 15 CVEs (Critical: 1, High: 1, Medium: 0, Low: 13)
    Critical CVEs: CVE-2025-68121
  • public.ecr.aws/sedai_io/prometheus/prometheus:v3.10.0: 13 CVEs (Critical: 0, High: 0, Medium: 0, Low: 13)
  • public.ecr.aws/sedai_io/sedai-kube-spec-controller:0.0.4: 53 CVEs (Critical: 2, High: 3, Medium: 3, Low: 45)
    Critical CVEs: CVE-2019-1010022, CVE-2025-68121
  • public.ecr.aws/sedai_io/sedai-smart-agent-enroll:v3.1.12: 27 CVEs (Critical: 0, High: 8, Medium: 8, Low: 11)
  • public.ecr.aws/sedai_io/sedai-smart-agent:v1.25.20: 30 CVEs (Critical: 1, High: 2, Medium: 6, Low: 21)
    Critical CVEs: CVE-2026-22184
  • public.ecr.aws/sedai_io/victoriametrics/victoria-metrics:v1.138.0: 7 CVEs (Critical: 1, High: 2, Medium: 1, Low: 3)
    Critical CVEs: CVE-2026-22184

⚠️ Please review the CVE findings above and address critical/high severity issues before merging.

bulwark-spectrocloud[bot]
bulwark-spectrocloud bot reviewed Mar 24, 2026
View reviewed changes
Copy link

@bulwark-spectrocloud bulwark-spectrocloud bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ CVE scan completed successfully.

Scan Summary:

  • Total images scanned: 12
  • Clean images: 4
  • Images with CVEs: 8
  • Total CVEs found: 166

🔴 Critical CVEs: 8
🟠 High CVEs: 12
🟡 Medium CVEs: 15
🟢 Low CVEs: 131

Images with CVEs:

  • public.ecr.aws/sedai_io/grafana/beyla:3.6.0: 5 CVEs (Critical: 0, High: 0, Medium: 0, Low: 5)
  • public.ecr.aws/sedai_io/nvidia/dcgm-exporter:4.5.2-4.8.1-distroless: 31 CVEs (Critical: 3, High: 2, Medium: 4, Low: 22)
    Critical CVEs: CVE-2019-1010022, CVE-2025-68121
  • public.ecr.aws/sedai_io/prometheus/kube-state-metrics:v2.18.0: 12 CVEs (Critical: 1, High: 0, Medium: 0, Low: 11)
    Critical CVEs: CVE-2025-68121
  • public.ecr.aws/sedai_io/prometheus/node-exporter:v1.10.2: 15 CVEs (Critical: 1, High: 1, Medium: 0, Low: 13)
    Critical CVEs: CVE-2025-68121
  • public.ecr.aws/sedai_io/prometheus/prometheus:v3.10.0: 13 CVEs (Critical: 0, High: 0, Medium: 0, Low: 13)
  • public.ecr.aws/sedai_io/sedai-kube-spec-controller:0.0.4: 53 CVEs (Critical: 2, High: 5, Medium: 5, Low: 41)
    Critical CVEs: CVE-2019-1010022, CVE-2025-68121
  • public.ecr.aws/sedai_io/sedai-smart-agent-enroll:v3.1.12: 7 CVEs (Critical: 0, High: 2, Medium: 0, Low: 5)
  • public.ecr.aws/sedai_io/sedai-smart-agent:v1.25.20: 30 CVEs (Critical: 1, High: 2, Medium: 6, Low: 21)
    Critical CVEs: CVE-2026-22184

⚠️ Please review the CVE findings above and address critical/high severity issues before merging.

@vishwanaths
Copy link
Collaborator

vishwanaths commented Mar 25, 2026

@haribtw - THere are few failures in Packs validation. Please address them:
ERROR: Image pull failed. public.ecr.aws/sedai_io/busybox:1.37 may not be a valid image
Error: GET https://public.ecr.aws/v2/sedai_io/grafana/alloy/manifests/v1.14.1: MANIFEST_UNKNOWN: Requested image not found
ERROR: Image pull failed. public.ecr.aws/sedai_io/grafana/alloy:v1.14.1 may not be a valid image

Fix those image paths.
Also, please provide a list of images in the values.yaml, so that airgap artifacts can be created using these images if needed.

vishwanaths
vishwanaths requested changes Mar 25, 2026
View reviewed changes
Copy link
Collaborator

@vishwanaths vishwanaths left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There are few failures in Packs validation. Please address them:
ERROR: Image pull failed. public.ecr.aws/sedai_io/busybox:1.37 may not be a valid image
Error: GET https://public.ecr.aws/v2/sedai_io/grafana/alloy/manifests/v1.14.1: MANIFEST_UNKNOWN: Requested image not found
ERROR: Image pull failed. public.ecr.aws/sedai_io/grafana/alloy:v1.14.1 may not be a valid image

Please fix those image paths.
Also, please provide a list of images in the values.yaml, so that airgap artifacts can be created using these images if needed.

@haribtw
Copy link
Author

haribtw commented Mar 26, 2026

There are few failures in Packs validation. Please address them: ERROR: Image pull failed. public.ecr.aws/sedai_io/busybox:1.37 may not be a valid image Error: GET https://public.ecr.aws/v2/sedai_io/grafana/alloy/manifests/v1.14.1: MANIFEST_UNKNOWN: Requested image not found ERROR: Image pull failed. public.ecr.aws/sedai_io/grafana/alloy:v1.14.1 may not be a valid image

Please fix those image paths. Also, please provide a list of images in the values.yaml, so that airgap artifacts can be created using these images if needed.

Thank you for the update @vishwanaths . We have rechecked and pushed the images that caused the errors. public.ecr.aws/sedai_io/busybox:1.37 was causing an issue because of rate limiting. As requested the images urls are also mentioned in the values.yaml already

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bulwark-spectrocloud bulwark-spectrocloud[bot] bulwark-spectrocloud[bot] left review comments

@vishwanaths vishwanaths vishwanaths requested changes

Requested changes must be addressed to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@haribtw @vishwanaths