diff --git a/projects/person-search-index-from-delius/.trivyignore b/projects/person-search-index-from-delius/.trivyignore index 680435198b..3467a96150 100644 --- a/projects/person-search-index-from-delius/.trivyignore +++ b/projects/person-search-index-from-delius/.trivyignore @@ -2,7 +2,7 @@ # Reason: LDAP authentication not used + no untrusted username input # Package: org.apache.derby:derby:10.14.1.0 # Reference: https://github.com/logstash-plugins/logstash-integration-jdbc/issues/147 -CVE-2022-46337 exp:2024-01-12 +CVE-2022-46337 # Reason: we don't use Maven # Package: org.apache.maven:maven-compat:3.3.9 diff --git a/projects/person-search-index-from-delius/container/Dockerfile b/projects/person-search-index-from-delius/container/Dockerfile index 3c6baf5855..9ca121a483 100644 --- a/projects/person-search-index-from-delius/container/Dockerfile +++ b/projects/person-search-index-from-delius/container/Dockerfile @@ -4,7 +4,7 @@ COPY --chown=yq /pipelines /pipelines RUN find /pipelines -type f -name '*.yml' -exec sh -c 'f="$1"; yq -o=json "$f" > "${f%.yml}.json"' shell {} +; -FROM logstash:8.11.3 +FROM logstash:8.12.0 USER root SHELL ["/bin/bash", "-o", "pipefail", "-c"]