Skip to content

feat: Add script to upgrade image versions in sec-scanners-config.yaml#696

Closed
medmes wants to merge 3 commits intokyma-project:mainfrom
medmes:feat/resolve-sec-scanners-version-mismatch
Closed

feat: Add script to upgrade image versions in sec-scanners-config.yaml#696
medmes wants to merge 3 commits intokyma-project:mainfrom
medmes:feat/resolve-sec-scanners-version-mismatch

Conversation

@medmes
Copy link
Member

@medmes medmes commented Feb 18, 2026

Description

This PR fixes the version mismatch issue in the release pipeline where Git tags pointed to commits containing outdated version references in sec-scanners-config.yaml. Previously, when creating release tag 1.3.9, the configuration files still referenced version 1.3.8, causing confusion and potential security scanning issues.

Changes proposed in this pull request:

  • Add new upgrade-images job to .github/workflows/create-release-klm.yml that executes before Git tag creation
  • Create .github/scripts/release/upgrade_versions.sh script to automatically update image version references in sec-scanners-config.yaml
  • Configure workflow to commit version updates with jellyfish-bot identity before tagging
  • Update job dependencies so draft-release waits for both validate-release and upgrade-images to complete
  • Ensure Git tags point to commits with synchronized version references

Related issue(s)
kyma-project/lifecycle-manager#2577

@medmes medmes requested a review from a team as a code owner February 18, 2026 14:49
@medmes medmes changed the title chore: Add script to upgrade image versions in sec-scanners-config.yaml feat: Add script to upgrade image versions in sec-scanners-config.yaml Feb 18, 2026
@c-pius
Copy link
Contributor

c-pius commented Feb 26, 2026

Closing in favor of #699

@c-pius c-pius closed this Feb 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

The version in the sec-scanners-config.yaml is not aligned with git tag.

2 participants