Security Vulnerabilities (77) in main branch

[pankajSrivastava54]

Hi All,

We are trying to see Marquez for our Data Lineage needs, but seeing 77 vulnerabilities .

We need some help in fixing those and can work on contributing to the upstream.

Please let us know what is needed.

regards

[boring-cyborg]

Thanks for opening your first issue in the Marquez project! Please be sure to follow the issue template!

[thijs-s]

Hey @pankajSrivastava54 , we ran into the same thing.

We’ve fixed a lot of dependency and image vulnerabilities in our maintained fork here: https://github.com/ilum-cloud/marquez

It was released as version 0.53.0

If you want to try a drop-in image, you can pull from Docker Hub: https://hub.docker.com/r/ilum/marquez/tags

The fork stays API-compatible with upstream (additive, non-breaking changes).

[pankajSrivastava54]

@thijs-s : I pulled the https://github.com/ilum-cloud/marquez

I am able to gradle build but when i tried to run docker, I see below error

Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: exec: "/opt/marquez/wait-for-it.sh": stat /opt/marquez/wait-for-it.sh: no such file or directory: unknown

any help is appreciated

[thijs-s]

Hi @pankajSrivastava54

How are you starting Marquez(running Docker)? with docker-compose ? if so, please let me know which you are using.

I will try to recreate that state based on your instructions.

wait-for-it.sh isn't in the Dockerfile, but you can add it with a volume.

[thijs-s]

Just in case anyone is looking for the solution, we fixed it here https://github.com/ilum-cloud/marquez.