Feat:update distroless && trivyignore

gisaia · Aug 21, 2024 · c22122c · c22122c
1 parent 7699a47
commit c22122c
Show file tree

Hide file tree

Showing 4 changed files with 6 additions and 3 deletions.
diff --git a/.github/workflows/.trivyignore b/.github/workflows/.trivyignore
@@ -0,0 +1,3 @@
+CVE-2023-52425
+CVE-2023-25193
+CVE-2023-45853
diff --git a/.github/workflows/trivy.yaml b/.github/workflows/trivy.yaml
@@ -21,7 +21,7 @@ jobs:
         format: 'table'
         exit-code: '1'
         timeout: '10m'
-        ignore-unfixed: true
+        ignore-unfixed: false
         vuln-type: 'os,library'
         severity: 'CRITICAL,HIGH'
         trivyignores: .github/workflows/.trivyignore
diff --git a/Dockerfile b/Dockerfile
@@ -17,7 +17,7 @@ RUN mvn install \
 ###################
 # PACKAGING STAGE #
 ###################
-FROM gisaia/arlas-openjdk-17-distroless:20240505183515
+FROM gisaia/arlas-openjdk-17-distroless:20240821142139
 
 # application placed into /opt/app
 WORKDIR /opt/app

diff --git a/Dockerfile-package-only b/Dockerfile-package-only
@@ -1,7 +1,7 @@
 ###################
 # PACKAGING STAGE #
 ###################
-FROM gisaia/arlas-openjdk-17-distroless:20240505183515
+FROM gisaia/arlas-openjdk-17-distroless:20240821142139
 
 # application placed into /opt/app
 WORKDIR /opt/app