diff --git a/.github/workflows/build-push-images.yml b/.github/workflows/build-push-images.yml index 978c5675..5696ca42 100644 --- a/.github/workflows/build-push-images.yml +++ b/.github/workflows/build-push-images.yml @@ -53,7 +53,7 @@ jobs: docker build -f ./lambda/Dockerfile -t ${{ matrix.ecr_repository }} --build-arg DIR=${{ matrix.dir }} . - name: Trivy Image Vulnerability Scanner for ${{ matrix.ecr_repository }} id: trivy_scan - uses: aquasecurity/trivy-action@0.12.0 + uses: aquasecurity/trivy-action@0.13.0 with: image-ref: ${{ matrix.ecr_repository }}:latest severity: "HIGH,CRITICAL" diff --git a/docker-compose.yml b/docker-compose.yml index 361129fd..fc8fc0da 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -72,7 +72,7 @@ services: AWS_PAGER: "" go-lint: - image: golangci/golangci-lint:v1.55.0 + image: golangci/golangci-lint:v1.55.1 working_dir: /go/src/app volumes: - ./:/go/src/app diff --git a/lambda/shared/go.mod b/lambda/shared/go.mod index c898a036..74cdc7aa 100644 --- a/lambda/shared/go.mod +++ b/lambda/shared/go.mod @@ -4,7 +4,7 @@ go 1.20 require ( github.com/aws/aws-lambda-go v1.41.0 - github.com/aws/aws-sdk-go v1.46.1 + github.com/aws/aws-sdk-go v1.46.5 github.com/aws/aws-xray-sdk-go v1.8.2 ) diff --git a/lambda/shared/go.sum b/lambda/shared/go.sum index dc3ddfbb..7f857433 100644 --- a/lambda/shared/go.sum +++ b/lambda/shared/go.sum @@ -5,6 +5,8 @@ github.com/aws/aws-lambda-go v1.41.0 h1:l/5fyVb6Ud9uYd411xdHZzSf2n86TakxzpvIoz7l github.com/aws/aws-lambda-go v1.41.0/go.mod h1:jwFe2KmMsHmffA1X2R09hH6lFzJQxzI8qK17ewzbQMM= github.com/aws/aws-sdk-go v1.46.1 h1:U26quvBWFZMQuultLw5tloW4GnmWaChEwMZNq8uYatw= github.com/aws/aws-sdk-go v1.46.1/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI= +github.com/aws/aws-sdk-go v1.46.5 h1:NYYUrhOftwiXPkqZwEpB3043bMukegJAt15ozrqJbEY= +github.com/aws/aws-sdk-go v1.46.5/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI= github.com/aws/aws-xray-sdk-go v1.8.2 h1:PVxNWnQG+rAYjxsmhEN97DTO57Dipg6VS0wsu6bXUB0= github.com/aws/aws-xray-sdk-go v1.8.2/go.mod h1:wMmVYzej3sykAttNBkXQHK/+clAPWTOrPiajEk7Cp3A= github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= @@ -21,6 +23,7 @@ github.com/jmespath/go-jmespath/internal/testify v1.5.1 h1:shLQSRRSCCPj3f2gpwzGw github.com/jmespath/go-jmespath/internal/testify v1.5.1/go.mod h1:L3OGu8Wl2/fWfCI6z80xFu9LTZmf1ZRjMHUOPmWr69U= github.com/klauspost/compress v1.15.0/go.mod h1:/3/Vjq9QcHkK5uEr5lBEmyoZ1iFhe47etQ6QUkpK6sk= github.com/klauspost/compress v1.15.9 h1:wKRjX6JRtDdrE9qwa4b/Cip7ACOshUI4smpCQanqjSY= +github.com/klauspost/compress v1.15.9/go.mod h1:PhcZ0MbTNciWF3rruxRgKxI5NkcHHrHUDtV4Yw2GlzU= github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4= github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0= github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM= diff --git a/signer/go.mod b/signer/go.mod index 01d4e75f..92294a66 100644 --- a/signer/go.mod +++ b/signer/go.mod @@ -2,7 +2,7 @@ module github.com/ministryofjustice/opg-data-lpa-deed/signer go 1.20 -require github.com/aws/aws-sdk-go v1.46.1 +require github.com/aws/aws-sdk-go v1.46.5 require ( github.com/davecgh/go-spew v1.1.1 // indirect diff --git a/signer/go.sum b/signer/go.sum index a29d7237..5740ac52 100644 --- a/signer/go.sum +++ b/signer/go.sum @@ -1,7 +1,10 @@ github.com/aws/aws-sdk-go v1.46.1 h1:U26quvBWFZMQuultLw5tloW4GnmWaChEwMZNq8uYatw= github.com/aws/aws-sdk-go v1.46.1/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI= +github.com/aws/aws-sdk-go v1.46.5 h1:NYYUrhOftwiXPkqZwEpB3043bMukegJAt15ozrqJbEY= +github.com/aws/aws-sdk-go v1.46.5/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI= github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c= +github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg= github.com/jmespath/go-jmespath v0.4.0/go.mod h1:T8mJZnbsbmF+m6zOOFylbeCJqk5+pHWvzYPziyZiYoo= github.com/jmespath/go-jmespath/internal/testify v1.5.1 h1:shLQSRRSCCPj3f2gpwzGwWFoC7ycTf1rcQZHOlsJ6N8=