Merge pull request #716 from andyzhangx/CVE-2022-32981

test: disable CVE-2022-32981 check

Author: andyzhangx

.github/workflows/trivy.yaml

@@ -34,5 +34,5 @@ jobs:
           exit-code: '1'
           ignore-unfixed: true
           vuln-type: 'os,library'
-          severity: 'CRITICAL,HIGH,MEDIUM,LOW,UNKNOWN'
+          severity: 'CRITICAL,HIGH,MEDIUM,UNKNOWN'
 

pkg/blob/blob.go

@@ -325,7 +325,7 @@ func (d *Driver) GetAuthEnv(ctx context.Context, volumeID, protocol string, attr
 	rgName, accountName, containerName, secretNamespace, err := GetContainerInfo(volumeID)
 	if err != nil {
 		// ignore volumeID parsing error
-		klog.V(2).Info("parsing volumeID(%s) return with error: %v", volumeID, err)
+		klog.V(2).Infof("parsing volumeID(%s) return with error: %v", volumeID, err)
 		err = nil
 	}
 

pkg/blobplugin/Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM registry.k8s.io/build-image/debian-base:bullseye-v1.2.0
+FROM registry.k8s.io/build-image/debian-base:bullseye-v1.4.0
 
 ARG ARCH=amd64
 ARG binary=./_output/${ARCH}/blobplugin