From 8f886783ebccdb8318e09456ceae0d125623a597 Mon Sep 17 00:00:00 2001 From: Emterry Date: Tue, 26 Nov 2024 15:39:03 +0000 Subject: [PATCH] dependabot update curl version --- .github/workflows/scan-image.yml | 6 +++--- Dockerfile | 4 ++-- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/scan-image.yml b/.github/workflows/scan-image.yml index f36160f..4fbf792 100644 --- a/.github/workflows/scan-image.yml +++ b/.github/workflows/scan-image.yml @@ -30,7 +30,7 @@ jobs: - name: Scan Image id: scan_image - uses: aquasecurity/trivy-action@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2 # v0.28.0 + uses: aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0 # v0.29.0 env: TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2 TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1 @@ -45,14 +45,14 @@ jobs: - name: Upload SARIF if: always() id: upload_sarif - uses: github/codeql-action/upload-sarif@396bb3e45325a47dd9ef434068033c6d5bb0d11a # v3.27.3 + uses: github/codeql-action/upload-sarif@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5 with: sarif_file: trivy-results.sarif - name: Scan Image (On SARIF Scan Failure) if: failure() && steps.scan_image.outcome == 'failure' id: scan_image_on_failure - uses: aquasecurity/trivy-action@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2 # v0.28.0 + uses: aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0 # v0.29.0 env: TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2 TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1 diff --git a/Dockerfile b/Dockerfile index 64648c8..19da8d9 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,6 +1,6 @@ # checkov:skip=CKV_DOCKER_2:Healthcheck instructions have not been added to container images # This image is an example base image for this template and can be replaced to fit user needs -FROM public.ecr.aws/ubuntu/ubuntu@sha256:5b2fc4131b3c134a019c3ea815811de70e6ad9ee1626f59bf302558a95b436e5 +FROM public.ecr.aws/ubuntu/ubuntu@sha256:0489ba01d3b98bbbff4561d473f50814970cd429fa335b61a0f0a21fd5fa32c1 LABEL org.opencontainers.image.vendor="Ministry of Justice" \ org.opencontainers.image.authors="Analytical Platform (analytical-platform@digital.justice.gov.uk)"\ @@ -36,7 +36,7 @@ apt-get update --yes apt-get install --yes \ "apt-transport-https=2.7.14build2" \ - "curl=8.5.0-2ubuntu10.4" + "curl=8.5.0-2ubuntu10.5" apt-get clean --yes