I have a handful of google container images that are flagging musl vulns.
https://console.cloud.google.com/gcr/images/google-containers/GLOBAL/k8s-dns-kube-dns-amd64?gcrImageListsize=30 lists all available image versions.
How do I attempt to find which image has the fix? Since these are open source I've looked in https://github.com/kubernetes/dns. Specifically:
- https://github.com/kubernetes/dns/blob/master/Dockerfile.kube-dns. Doesn't seem to show any base image
- https://github.com/kubernetes/dns/blob/master/Makefile Shows "BUILD_IMAGE ?= golang:1.11-alpine" but that image is quite old and isn't even listed in https://github.com/docker-library/golang/tree/master where the latest is 1.13