security: remove mcp/markitdown container (849 CVEs, no upstream fix) - #49806
Merged
pelikhan merged 2 commits intoAug 2, 2026
Merged
Conversation
…issue #49515) Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copilot
AI
changed the title
[WIP] Update mcp/markitdown to resolve container vulnerabilities
security: remove mcp/markitdown container (849 CVEs, no upstream fix)
Aug 2, 2026
pelikhan
marked this pull request as ready for review
August 2, 2026 15:48
pelikhan
deleted the
copilot/container-image-scan-fix-vulnerabilities-one-more-time
branch
August 2, 2026 15:48
Contributor
There was a problem hiding this comment.
Pull request overview
Disables the vulnerable MarkItDown MCP container pending an upstream fix.
Changes:
- Removes MarkItDown imports and container pins.
- Regenerates affected workflow locks.
- Adds security notes and a patch changeset.
Show a summary per file
| File | Description |
|---|---|
pkg/workflow/data/action_pins.json |
Removes embedded MarkItDown pin. |
pkg/actionpins/data/action_pins.json |
Removes embedded MarkItDown pin. |
.github/workflows/shared/mcp/markitdown.md |
Disables the MCP definition. |
.github/workflows/scout.md |
Removes the MarkItDown import. |
.github/workflows/scout.lock.yml |
Regenerates Scout without MarkItDown. |
.github/workflows/pdf-summary.md |
Removes the converter import. |
.github/workflows/pdf-summary.lock.yml |
Regenerates PDF Summary without MarkItDown. |
.github/workflows/mcp-inspector.md |
Removes the MarkItDown import. |
.github/workflows/mcp-inspector.lock.yml |
Regenerates MCP Inspector without MarkItDown. |
.github/aw/actions-lock.json |
Removes the repository container pin. |
.changeset/patch-remove-markitdown-vulnerable-image.md |
Documents the patch release. |
Review details
Tip
Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Files reviewed: 11/11 changed files
- Comments generated: 4
- Review effort level: Balanced
| max-tool-denials: 3 | ||
| imports: | ||
| - shared/mcp/markitdown.md | ||
| # Note: markitdown.md excluded — docker.io/mcp/markitdown has Critical/High CVEs (see #49515) |
| - shared/mcp/deepwiki.md | ||
| - shared/mcp/fabric-rti.md | ||
| - shared/mcp/markitdown.md | ||
| # Note: markitdown.md excluded — docker.io/mcp/markitdown has Critical/High CVEs (see #49515) |
| # MarkItDown MCP Server | ||
| # SECURITY: docker.io/mcp/markitdown has Critical/High CVEs with no upstream fix available (issue #49515). | ||
| # The container definition has been removed until a patched image is published upstream. | ||
| # To re-enable, restore the mcp-servers block and update the pinned digest in actions-lock.json. |
|
|
||
| Remove `docker.io/mcp/markitdown` container from workflows due to Critical and High CVEs with no upstream fix available (issue #49515). | ||
|
|
||
| The `shared/mcp/markitdown.md` MCP server definition has been emptied, its import removed from `scout.md`, `pdf-summary.md`, and `mcp-inspector.md`, and the pinned digest removed from `actions-lock.json`. Re-enable by restoring the `mcp-servers` block in `shared/mcp/markitdown.md` and updating the pinned digest once a patched image is published upstream. |
Contributor
|
🎉 This pull request is included in a new release. Release: |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
mcp/markitdown@sha256:9cb5f26d...carries 849 vulnerabilities (45 Critical, 343 High) on a Debian 11 base with no patched image published upstream. Following the same pattern as themcp/brave-searchremoval (#48546), the container is disabled until upstream ships a fix.Changes
shared/mcp/markitdown.md— emptiedmcp-serversblock; replaced with comments documenting the hold and re-enable instructionsmcp-inspector.md,scout.md,pdf-summary.md— removedshared/mcp/markitdown.mdimport; added inline security note comment on each.github/aw/actions-lock.json— removed pinnedmcp/markitdowndigest entry.changeset/patch-remove-markitdown-vulnerable-image.mdTo re-enable: restore the
mcp-serversblock inshared/mcp/markitdown.md, update the pinned digest inactions-lock.json, and restore the imports in affected workflows.