Release: Merge release into master from: release/2.42.0

[github-actions]

Release triggered by Maffooch

[dryrunsecurity]

DryRun Security Summary

The pull request focuses on improving the security, reliability, and consistency of DefectDojo's GitHub Actions workflows by updating dependency and action versions, implementing security best practices, and integrating static code analysis tools.

Expand for full summary

Summary:

The code changes in this pull request cover a wide range of updates to the GitHub Actions workflows and configuration files used in the DefectDojo project. The changes focus on improving the reliability, consistency, and security of the project's build, testing, and release processes.

Key security-related updates include:

1. Updating dependency versions to the latest stable versions, which helps mitigate potential security vulnerabilities.
2. Pinning the versions of GitHub Actions used in the workflows to specific commit hashes, ensuring consistent and reproducible behavior.
3. Implementing security-conscious practices, such as validating user inputs, sanitizing sensitive data, and properly managing secrets.
4. Improving the security of the Helm chart deployment and Docker image building processes.
5. Integrating static code analysis tools, like ShellCheck and Ruff, to catch potential security issues early in the development process.

Overall, the changes in this pull request demonstrate a strong focus on maintaining the security and integrity of the DefectDojo project. The application security engineer's review has not identified any immediate security concerns, but it's important to continue monitoring the project's dependencies and infrastructure for any future security-related updates or vulnerabilities.

Files Changed:

• .github/workflows/cancel-outdated-workflow-runs.yml: Updated the version of the "styfle/cancel-workflow-action" GitHub action.
• .github/workflows/fetch-oas.yml: Updated the versions of the "actions/checkout" and "actions/upload-artifact" actions.
• .github/workflows/build-docker-images-for-testing.yml: Updated the versions of the "actions/checkout", "docker/setup-buildx-action", "docker/build-push-action", and "actions/upload-artifact" actions.
• .github/workflows/detect-merge-conflicts.yaml: Updated the version of the "eps1lon/actions-label-merge-conflict" action.
• .github/workflows/gh-pages.yml: Updated the versions of various GitHub Actions used in the workflow, including "peaceiris/actions-hugo", "actions/setup-node", "actions/cache", "actions/checkout", "actions/configure-pages", and "peaceiris/actions-gh-pages".
• .github/workflows/plantuml.yml: Updated the versions of the "actions/checkout" and "stefanzweifel/git-auto-commit-action" actions.
• .github/workflows/integration-tests.yml: Updated the versions of the "actions/checkout" and "actions/download-artifact" actions.
• .github/workflows/k8s-tests.yml: Updated the versions of the "actions/checkout" and "manusa/actions-setup-minikube" actions.
• .github/workflows/pr-labeler.yml: Updated the version of the "actions/labeler" action.
• .github/workflows/release-1-create-pr.yml: No significant changes.
• .github/workflows/release-2-tag-docker-push.yml: No significant changes.
• .github/workflows/release-3-master-into-dev.yml: No significant changes.
• .github/workflows/release-drafter.yml: Updated the versions of the "release-drafter/release-drafter", "actions/download-artifact", and "actions/upload-release-asset" actions.
• .github/workflows/release-x-manual-helm-chart.yml: Updated the versions of the "actions/checkout", "mikefarah/yq", and "softprops/action-gh-release" actions.
• .github/workflows/release_drafter_valentijn.yml: No significant changes.
• .github/workflows/release-x-manual-docker-containers.yml: Updated the versions of the "docker/login-action", "actions/checkout", "docker/setup-buildx-action", and "docker/build-push-action" actions.
• .github/workflows/shellcheck.yml: Updated the version of the "actions/checkout" action.
• .github/workflows/ruff.yml: Updated the version of the "actions/checkout" action.
• .github/workflows/rest-framework-tests.yml: Updated the versions of the "actions/checkout" and "actions/download-artifact" actions.
• Dockerfile.nginx-alpine: Updated the NGINX base image version from 1.27.2 to 1.27.3.
• .github/workflows/test-helm-chart.yml: Updated the versions of various GitHub

Code Analysis

We ran 9 analyzers against 30 files and 2 analyzers had findings. 7 analyzers had no findings.

Analyzer	Findings
Configured Codepaths Analyzer	6 findings
Sensitive Files Analyzer	2 findings

Overall Riskiness

🔴 Risk threshold exceeded.

We've notified @mtesauro, @grendel513.

View PR in the DryRun Dashboard.