Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update gcr.io/distroless/python3-debian12:nonroot docker digest to c4606a5 #179

Merged
merged 1 commit into from
Jul 5, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jul 1, 2024

Mend Renovate

This PR contains the following updates:

Package Type Update Change
gcr.io/distroless/python3-debian12 final digest 95f5fa8 -> c4606a5

Configuration

📅 Schedule: Branch creation - "every 3 months on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

Copy link

github-actions bot commented Jul 1, 2024

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 5 0 0.04s
✅ BASH bash-exec 2 0 0.03s
✅ BASH shellcheck 2 0 0.01s
✅ BASH shfmt 2 0 0.04s
✅ DOCKERFILE hadolint 2 0 0.15s
✅ JSON jsonlint 17 0 0.26s
✅ JSON npm-package-json-lint yes no 0.99s
✅ JSON prettier 17 0 1.61s
✅ MARKDOWN markdownlint 3 0 0.69s
✅ PYTHON bandit 31 0 1.54s
✅ PYTHON black 31 0 2.0s
✅ PYTHON flake8 31 0 0.99s
✅ PYTHON isort 31 0 0.43s
✅ PYTHON mypy 31 0 9.75s
✅ PYTHON pyright 31 0 9.25s
✅ PYTHON ruff 31 0 0.07s
✅ REPOSITORY checkov yes no 15.99s
✅ REPOSITORY gitleaks yes no 0.11s
✅ REPOSITORY git_diff yes no 0.01s
✅ REPOSITORY grype yes no 14.83s
✅ REPOSITORY kics yes no 32.54s
✅ REPOSITORY secretlint yes no 0.93s
✅ REPOSITORY syft yes no 0.61s
✅ REPOSITORY trivy yes no 14.1s
✅ REPOSITORY trivy-sbom yes no 8.33s
✅ REPOSITORY trufflehog yes no 4.81s
✅ YAML prettier 15 0 1.02s
✅ YAML yamllint 15 0 0.66s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

MegaLinter is graciously provided by OX Security

@renovate renovate bot force-pushed the renovate/gcr.io-distroless-python3-debian12-nonroot branch from 08a0f7f to 658f527 Compare July 3, 2024 09:07
@renovate renovate bot changed the title chore(deps): update gcr.io/distroless/python3-debian12:nonroot docker digest to 14c62b8 chore(deps): update gcr.io/distroless/python3-debian12:nonroot docker digest to c4606a5 Jul 4, 2024
@renovate renovate bot force-pushed the renovate/gcr.io-distroless-python3-debian12-nonroot branch from 658f527 to c4e5bdc Compare July 4, 2024 22:41
Copy link

github-actions bot commented Jul 4, 2024

Trivy image scan report

ghcr.io/miracum/ahd2fhir:pr-179 (debian 12.6)

62 known vulnerabilities found (LOW: 24 CRITICAL: 1 HIGH: 6 MEDIUM: 28)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
libc6 CVE-2010-4756 LOW 2.36-9+deb12u7
libc6 CVE-2018-20796 LOW 2.36-9+deb12u7
libc6 CVE-2019-1010022 LOW 2.36-9+deb12u7
libc6 CVE-2019-1010023 LOW 2.36-9+deb12u7
libc6 CVE-2019-1010024 LOW 2.36-9+deb12u7
libc6 CVE-2019-1010025 LOW 2.36-9+deb12u7
libc6 CVE-2019-9192 LOW 2.36-9+deb12u7
libexpat1 CVE-2023-52425 HIGH 2.5.0-1
libexpat1 CVE-2023-52426 LOW 2.5.0-1
libexpat1 CVE-2024-28757 LOW 2.5.0-1
libgcc-s1 CVE-2023-4039 MEDIUM 12.2.0-14
libgcc-s1 CVE-2022-27943 LOW 12.2.0-14
libgomp1 CVE-2023-4039 MEDIUM 12.2.0-14
libgomp1 CVE-2022-27943 LOW 12.2.0-14
libgssapi-krb5-2 CVE-2024-26462 HIGH 1.20.1-2+deb12u1
libgssapi-krb5-2 CVE-2024-26458 MEDIUM 1.20.1-2+deb12u1
libgssapi-krb5-2 CVE-2024-26461 MEDIUM 1.20.1-2+deb12u1
libgssapi-krb5-2 CVE-2024-37370 MEDIUM 1.20.1-2+deb12u1
libgssapi-krb5-2 CVE-2024-37371 MEDIUM 1.20.1-2+deb12u1
libgssapi-krb5-2 CVE-2018-5709 LOW 1.20.1-2+deb12u1
libk5crypto3 CVE-2024-26462 HIGH 1.20.1-2+deb12u1
libk5crypto3 CVE-2024-26458 MEDIUM 1.20.1-2+deb12u1
libk5crypto3 CVE-2024-26461 MEDIUM 1.20.1-2+deb12u1
libk5crypto3 CVE-2024-37370 MEDIUM 1.20.1-2+deb12u1
libk5crypto3 CVE-2024-37371 MEDIUM 1.20.1-2+deb12u1
libk5crypto3 CVE-2018-5709 LOW 1.20.1-2+deb12u1
libkrb5-3 CVE-2024-26462 HIGH 1.20.1-2+deb12u1
libkrb5-3 CVE-2024-26458 MEDIUM 1.20.1-2+deb12u1
libkrb5-3 CVE-2024-26461 MEDIUM 1.20.1-2+deb12u1
libkrb5-3 CVE-2024-37370 MEDIUM 1.20.1-2+deb12u1
libkrb5-3 CVE-2024-37371 MEDIUM 1.20.1-2+deb12u1
libkrb5-3 CVE-2018-5709 LOW 1.20.1-2+deb12u1
libkrb5support0 CVE-2024-26462 HIGH 1.20.1-2+deb12u1
libkrb5support0 CVE-2024-26458 MEDIUM 1.20.1-2+deb12u1
libkrb5support0 CVE-2024-26461 MEDIUM 1.20.1-2+deb12u1
libkrb5support0 CVE-2024-37370 MEDIUM 1.20.1-2+deb12u1
libkrb5support0 CVE-2024-37371 MEDIUM 1.20.1-2+deb12u1
libkrb5support0 CVE-2018-5709 LOW 1.20.1-2+deb12u1
libncursesw6 CVE-2023-50495 MEDIUM 6.4-4
libncursesw6 CVE-2023-45918 LOW 6.4-4
libpython3.11-minimal CVE-2023-27043 MEDIUM 3.11.2-6+deb12u2
libpython3.11-minimal CVE-2024-4032 LOW 3.11.2-6+deb12u2
libpython3.11-minimal CVE-2024-0397 UNKNOWN 3.11.2-6+deb12u2
libpython3.11-stdlib CVE-2023-27043 MEDIUM 3.11.2-6+deb12u2
libpython3.11-stdlib CVE-2024-4032 LOW 3.11.2-6+deb12u2
libpython3.11-stdlib CVE-2024-0397 UNKNOWN 3.11.2-6+deb12u2
libsqlite3-0 CVE-2023-7104 HIGH 3.40.1-2
libsqlite3-0 CVE-2024-0232 MEDIUM 3.40.1-2
libsqlite3-0 CVE-2021-45346 LOW 3.40.1-2
libssl3 CVE-2024-4603 MEDIUM 3.0.13-1~deb12u1
libssl3 CVE-2024-4741 MEDIUM 3.0.13-1~deb12u1
libssl3 CVE-2024-5535 MEDIUM 3.0.13-1~deb12u1
libssl3 CVE-2024-2511 LOW 3.0.13-1~deb12u1
libstdc++6 CVE-2023-4039 MEDIUM 12.2.0-14
libstdc++6 CVE-2022-27943 LOW 12.2.0-14
libtinfo6 CVE-2023-50495 MEDIUM 6.4-4
libtinfo6 CVE-2023-45918 LOW 6.4-4
libuuid1 CVE-2022-0563 LOW 2.38.1-5+deb12u1
python3.11-minimal CVE-2023-27043 MEDIUM 3.11.2-6+deb12u2
python3.11-minimal CVE-2024-4032 LOW 3.11.2-6+deb12u2
python3.11-minimal CVE-2024-0397 UNKNOWN 3.11.2-6+deb12u2
zlib1g CVE-2023-45853 CRITICAL 1:1.2.13.dfsg-1

No Misconfigurations found

@chgl chgl merged commit e7ff979 into master Jul 5, 2024
14 checks passed
@miracum-bot
Copy link

🎉 This issue has been resolved in version 3.1.9 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants