diff --git a/.github/workflows/build-push-images.yml b/.github/workflows/build-push-images.yml index 978c5675..5696ca42 100644 --- a/.github/workflows/build-push-images.yml +++ b/.github/workflows/build-push-images.yml @@ -53,7 +53,7 @@ jobs: docker build -f ./lambda/Dockerfile -t ${{ matrix.ecr_repository }} --build-arg DIR=${{ matrix.dir }} . - name: Trivy Image Vulnerability Scanner for ${{ matrix.ecr_repository }} id: trivy_scan - uses: aquasecurity/trivy-action@0.12.0 + uses: aquasecurity/trivy-action@0.13.0 with: image-ref: ${{ matrix.ecr_repository }}:latest severity: "HIGH,CRITICAL" diff --git a/docker-compose.yml b/docker-compose.yml index 361129fd..fc8fc0da 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -72,7 +72,7 @@ services: AWS_PAGER: "" go-lint: - image: golangci/golangci-lint:v1.55.0 + image: golangci/golangci-lint:v1.55.1 working_dir: /go/src/app volumes: - ./:/go/src/app diff --git a/lambda/shared/go.mod b/lambda/shared/go.mod index c898a036..74cdc7aa 100644 --- a/lambda/shared/go.mod +++ b/lambda/shared/go.mod @@ -4,7 +4,7 @@ go 1.20 require ( github.com/aws/aws-lambda-go v1.41.0 - github.com/aws/aws-sdk-go v1.46.1 + github.com/aws/aws-sdk-go v1.46.5 github.com/aws/aws-xray-sdk-go v1.8.2 ) diff --git a/lambda/shared/go.sum b/lambda/shared/go.sum index dc3ddfbb..7f857433 100644 --- a/lambda/shared/go.sum +++ b/lambda/shared/go.sum @@ -5,6 +5,8 @@ github.com/aws/aws-lambda-go v1.41.0 h1:l/5fyVb6Ud9uYd411xdHZzSf2n86TakxzpvIoz7l github.com/aws/aws-lambda-go v1.41.0/go.mod h1:jwFe2KmMsHmffA1X2R09hH6lFzJQxzI8qK17ewzbQMM= github.com/aws/aws-sdk-go v1.46.1 h1:U26quvBWFZMQuultLw5tloW4GnmWaChEwMZNq8uYatw= github.com/aws/aws-sdk-go v1.46.1/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI= +github.com/aws/aws-sdk-go v1.46.5 h1:NYYUrhOftwiXPkqZwEpB3043bMukegJAt15ozrqJbEY= +github.com/aws/aws-sdk-go v1.46.5/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI= github.com/aws/aws-xray-sdk-go v1.8.2 h1:PVxNWnQG+rAYjxsmhEN97DTO57Dipg6VS0wsu6bXUB0= github.com/aws/aws-xray-sdk-go v1.8.2/go.mod h1:wMmVYzej3sykAttNBkXQHK/+clAPWTOrPiajEk7Cp3A= github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= @@ -21,6 +23,7 @@ github.com/jmespath/go-jmespath/internal/testify v1.5.1 h1:shLQSRRSCCPj3f2gpwzGw github.com/jmespath/go-jmespath/internal/testify v1.5.1/go.mod h1:L3OGu8Wl2/fWfCI6z80xFu9LTZmf1ZRjMHUOPmWr69U= github.com/klauspost/compress v1.15.0/go.mod h1:/3/Vjq9QcHkK5uEr5lBEmyoZ1iFhe47etQ6QUkpK6sk= github.com/klauspost/compress v1.15.9 h1:wKRjX6JRtDdrE9qwa4b/Cip7ACOshUI4smpCQanqjSY= +github.com/klauspost/compress v1.15.9/go.mod h1:PhcZ0MbTNciWF3rruxRgKxI5NkcHHrHUDtV4Yw2GlzU= github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4= github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0= github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM= diff --git a/signer/go.mod b/signer/go.mod index 01d4e75f..92294a66 100644 --- a/signer/go.mod +++ b/signer/go.mod @@ -2,7 +2,7 @@ module github.com/ministryofjustice/opg-data-lpa-deed/signer go 1.20 -require github.com/aws/aws-sdk-go v1.46.1 +require github.com/aws/aws-sdk-go v1.46.5 require ( github.com/davecgh/go-spew v1.1.1 // indirect diff --git a/signer/go.sum b/signer/go.sum index a29d7237..5740ac52 100644 --- a/signer/go.sum +++ b/signer/go.sum @@ -1,7 +1,10 @@ github.com/aws/aws-sdk-go v1.46.1 h1:U26quvBWFZMQuultLw5tloW4GnmWaChEwMZNq8uYatw= github.com/aws/aws-sdk-go v1.46.1/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI= +github.com/aws/aws-sdk-go v1.46.5 h1:NYYUrhOftwiXPkqZwEpB3043bMukegJAt15ozrqJbEY= +github.com/aws/aws-sdk-go v1.46.5/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI= github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c= +github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg= github.com/jmespath/go-jmespath v0.4.0/go.mod h1:T8mJZnbsbmF+m6zOOFylbeCJqk5+pHWvzYPziyZiYoo= github.com/jmespath/go-jmespath/internal/testify v1.5.1 h1:shLQSRRSCCPj3f2gpwzGwWFoC7ycTf1rcQZHOlsJ6N8= diff --git a/terraform/account/.terraform.lock.hcl b/terraform/account/.terraform.lock.hcl index 81f95737..c4be47ab 100644 --- a/terraform/account/.terraform.lock.hcl +++ b/terraform/account/.terraform.lock.hcl @@ -2,24 +2,22 @@ # Manual edits may be lost in future updates. provider "registry.terraform.io/hashicorp/aws" { - version = "5.22.0" + version = "5.23.0" constraints = ">= 5.8.0" hashes = [ - "h1:4oAjE3Fn/vXruaORPWH1lH7q/+oPEqxNm6+KjOMeMrI=", - "zh:09b8475cd519c945423b1e1183b71a4209dd2927e0d289a88c5abeecb53c1753", - "zh:2448e0c3ce9b991a5dd70f6a42d842366a6a2460cf63b31fb9bc5d2cc92ced19", - "zh:3b9fc2bf6714a9a9ab25eae3e56cead3d3917bc1b6d8b9fb3111c4198a790c72", - "zh:4fbd28ad5380529a36c54d7a96c9768df1288c625d28b8fa3a50d4fc2176ef0f", - "zh:54d550f190702a7edc2d459952d025e259a8c0b0ff7df3f15bbcc148539214bf", - "zh:638f406d084ac96f3a0b0a5ce8aa71a5a2a781a56ba96e3a235d3982b89eef0d", - "zh:69d4c175b13b6916b5c9398172cc384e7af46cb737b45870ab9907f12e82a28a", - "zh:81edec181a67255d25caf5e7ffe6d5e8f9373849b9e8f5e0705f277640abb18e", - "zh:9b12af85486a96aedd8d7984b0ff811a4b42e3d88dad1a3fb4c0b580d04fa425", - "zh:a66efb2b3cf7be8116728ae5782d7550f23f3719da2ed3c10228d29c44b7dc84", - "zh:ae754478d0bfa42195d16cf46091fab7c1c075ebc965d919338e36aed45add78", - "zh:e0603ad0061c43aa1cb52740b1e700b8afb55667d7ee01c1cc1ceb6f983d4c9d", - "zh:e4cb701d0185884eed0492a66eff17251f5b4971d30e81acd5e0a55627059fc8", - "zh:f7db2fcf69679925dde1ae326526242fd61ba1f83f614b1f6d9d68c925417e51", - "zh:fef331b9b62bc26d900ae937cc662281ff30794edf48aebfe8997d0e16835f6d", + "h1:7S/Z+8JLD7cRPTZ+do3sca7TDmk4akW9elTiJjCwtAE=", + "h1:AwjyBYctD8UKCXcm+kLJfRjYdUYzG0hetStKrw8UL9M=", + "h1:E7XBEW8pGlRvR4ZM9ifuE5uvQRTLDFzhO0V0NDkzGyY=", + "h1:HsDIvq0/RsfBdID2tQ7SzJXxZ88SLiXIEewIfG+h1yw=", + "h1:SVR5C6CrB1ZFJ5VdktDa2d2U6BwYOZVTAOOWOccWM6I=", + "h1:TELLD09+JVugSUXP2VTG/gaqEaSiBfF/YI/a0S1wmu8=", + "h1:WqyPdAf7aVH5+ItnghPmnBTDaNr2VPQBd/lxYU1PCBM=", + "h1:aXanfqwC+w6b0WlnAbH3+1rW8Rm9ltpJwx3//Bk0Z2Y=", + "h1:dNxn78qVLsN5IW82/BqlMXbdSxdh6Dq1hfiEu5AjRyM=", + "h1:i0ONGrnIRQU0K8BeG2yr0KrkmOAfdRnoPo+zatGkJ4k=", + "h1:jV3S2mVUT0sc3pxG6XrQLizk5epHYEFd8Eh1Wciw4Mw=", + "h1:mwXlgcIQ+4+cFj507gcASdedCoKDJfvUQ8CKAq+VkEw=", + "h1:p0P8JCRiFNiRyRLY0QKCwa1h8BaBOtBbqNbsfaGmYSw=", + "h1:yxaBYIz7ijM0MDABdDu8WVZAlP3b6T+cH9XshEIXeUc=", ] } diff --git a/terraform/environment/.terraform.lock.hcl b/terraform/environment/.terraform.lock.hcl index 167010cd..c4be47ab 100644 --- a/terraform/environment/.terraform.lock.hcl +++ b/terraform/environment/.terraform.lock.hcl @@ -2,22 +2,22 @@ # Manual edits may be lost in future updates. provider "registry.terraform.io/hashicorp/aws" { - version = "5.22.0" + version = "5.23.0" constraints = ">= 5.8.0" hashes = [ - "h1:+txIES2xSzEPYg8sQYtJaZwvOKSQLji+juxuYXwoaC8=", - "h1:/qHuMnVQtV9kWeERCLjbEwf+1MTT/3jySXgCe9eGA8U=", - "h1:4oAjE3Fn/vXruaORPWH1lH7q/+oPEqxNm6+KjOMeMrI=", - "h1:IhWpZTNTPvJ0TpFjlFksXk4ESBgCiZoGIspyCk4fZaI=", - "h1:MqEHvwLEUS/kIQQStNuupXv4NduuZ0+91+W2k0VWvTI=", - "h1:N0jHwvdmN49BAxQaSRrefGLTkTztTyEKb/pOjS93ppI=", - "h1:XKXLHDDEFwViBJBHjdwIKAaOPkobAm3mHlwBrzUHyQc=", - "h1:XeMTnwj40DQAqAgIPWa/pZYr3/PfKB1afMjxMYMXnFE=", - "h1:XuU3tsGzElMt4Ti8SsM05pFllNMwSC4ScUxcfsOS140=", - "h1:bNRGSiw+XvdXgU94N0fto22cwPY3tfxdrqC/19X0RVw=", - "h1:f0z3lC8l8EOnFzppf+MPOho036x/wPJTcittL7nCjvc=", - "h1:q8JCm3r/lVFQPhTPNMB0O1qEuLx/RNeJdY3gTTLwFh8=", - "h1:s5D2g7z2dt8mqIwnQAjyE6NZWEirfRxt7kLsmslY5Ls=", - "h1:ucoUpPuJUrtC5PxO3TpES2yQ7cMWZlfIQCbIbEwen94=", + "h1:7S/Z+8JLD7cRPTZ+do3sca7TDmk4akW9elTiJjCwtAE=", + "h1:AwjyBYctD8UKCXcm+kLJfRjYdUYzG0hetStKrw8UL9M=", + "h1:E7XBEW8pGlRvR4ZM9ifuE5uvQRTLDFzhO0V0NDkzGyY=", + "h1:HsDIvq0/RsfBdID2tQ7SzJXxZ88SLiXIEewIfG+h1yw=", + "h1:SVR5C6CrB1ZFJ5VdktDa2d2U6BwYOZVTAOOWOccWM6I=", + "h1:TELLD09+JVugSUXP2VTG/gaqEaSiBfF/YI/a0S1wmu8=", + "h1:WqyPdAf7aVH5+ItnghPmnBTDaNr2VPQBd/lxYU1PCBM=", + "h1:aXanfqwC+w6b0WlnAbH3+1rW8Rm9ltpJwx3//Bk0Z2Y=", + "h1:dNxn78qVLsN5IW82/BqlMXbdSxdh6Dq1hfiEu5AjRyM=", + "h1:i0ONGrnIRQU0K8BeG2yr0KrkmOAfdRnoPo+zatGkJ4k=", + "h1:jV3S2mVUT0sc3pxG6XrQLizk5epHYEFd8Eh1Wciw4Mw=", + "h1:mwXlgcIQ+4+cFj507gcASdedCoKDJfvUQ8CKAq+VkEw=", + "h1:p0P8JCRiFNiRyRLY0QKCwa1h8BaBOtBbqNbsfaGmYSw=", + "h1:yxaBYIz7ijM0MDABdDu8WVZAlP3b6T+cH9XshEIXeUc=", ] }