From c58289cc1b1150ca6e322f864a7216a88ca63195 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 21 Aug 2024 08:32:40 +0000 Subject: [PATCH 1/2] Bump github/codeql-action from 3.26.0 to 3.26.3 (#91) --- .github/workflows/scan-image.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/scan-image.yml b/.github/workflows/scan-image.yml index 06afc19..437e446 100644 --- a/.github/workflows/scan-image.yml +++ b/.github/workflows/scan-image.yml @@ -42,7 +42,7 @@ jobs: - name: Upload SARIF if: always() id: upload_sarif - uses: github/codeql-action/upload-sarif@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # v3.26.0 + uses: github/codeql-action/upload-sarif@883d8588e56d1753a8a58c1c86e88976f0c23449 # v3.26.3 with: sarif_file: trivy-results.sarif From aa2ae75d325f45feba25a67e52dbee355aa6c5fe Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 21 Aug 2024 08:33:02 +0000 Subject: [PATCH 2/2] Bump ubuntu/ubuntu from `288b44a` to `65ccda6` (#90) --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index e72173b..398281f 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,6 +1,6 @@ # checkov:skip=CKV_DOCKER_2:Healthcheck instructions have not been added to container images # This image is an example base image for this template and can be replaced to fit user needs -FROM public.ecr.aws/ubuntu/ubuntu@sha256:288b44a1b2dfe3788255c3abd41e346bece153b9e066325f461f605425afaf82 +FROM public.ecr.aws/ubuntu/ubuntu@sha256:65ccda647ad998c36c5b0365e308ec0b1bc770ace445d5e954d55ac8c19a9c27 LABEL org.opencontainers.image.vendor="Ministry of Justice" \ org.opencontainers.image.authors="Analytical Platform (analytical-platform@digital.justice.gov.uk)"\