diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 47dbd20..4178ad2 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -56,7 +56,7 @@ jobs: vuln-type: os,library format: table ignore-unfixed: true - severity: CRITICAL,HIGH,MEDIUM,LOW + severity: CRITICAL,HIGH,MEDIUM,LOW,UNKNOWN trivy-config: trivy.yaml exit-code: '1' env: diff --git a/Dockerfile b/Dockerfile index 5523bbb..ed6cd1f 100644 --- a/Dockerfile +++ b/Dockerfile @@ -3,7 +3,7 @@ # and "Missing User Instruction" since 2ms container is stopped after scan # Builder image -FROM cgr.dev/chainguard/go@sha256:88919362146ee54cea7aea132c256d2f0581aeeb0b1c2661337ecf99e9dc945b AS builder +FROM cgr.dev/chainguard/go@sha256:bec4bfc80786869dc30beca3d0bd437bd932f376dc6ac5b1f4dd6a5355ba11fc AS builder WORKDIR /app @@ -20,7 +20,7 @@ COPY . . RUN GOOS=linux GOARCH=amd64 go build -ldflags="-s -w" -a -o /app/2ms . # Runtime image -FROM cgr.dev/chainguard/git@sha256:0389019d7ee820683793e0ad9d1863120d586962803d84e8d57aa003922060d2 +FROM cgr.dev/chainguard/git@sha256:d32fb4fbb132929abae2d2f742e3d3bfdbd4937caa7021299130ad096227ced0 WORKDIR /app diff --git a/go.mod b/go.mod index 632b5e8..72baee1 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/checkmarx/2ms -go 1.23.1 +go 1.23.5 require ( github.com/bwmarrin/discordgo v0.27.1