Merge pull request #99 from eugene-davis/main

Updates and Fixes

.bumpversion.cfg

@@ -1,5 +1,5 @@
 [bumpversion]
-current_version = 1.1.13
+current_version = 1.1.15
 commit = True
 tag = False
 message = Bump version: {current_version} → {new_version}

.github/containerscan/allowedlist.yaml

@@ -1,3 +1,3 @@
 general:
   vulnerabilities:
-  - CVE-2022-40674
+  - CVE-2022-43680 # libexpat isn't available in Alpine 3.16's repositories so I believe this is a false positive

.github/workflows/release.yml

@@ -6,7 +6,7 @@ on:
   workflow_dispatch:
 
 env:
-  VERSION: 1.1.13
+  VERSION: 1.1.15
 
 jobs:
   release:

Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.10.7-alpine3.16 as builder
+FROM python:3.10.8-alpine3.16 as builder
 
 COPY . /build
 
@@ -8,7 +8,7 @@ RUN python -m venv /venv && /venv/bin/pip --no-cache-dir install .
 
 FROM python:3.10.7-alpine3.16
 
-RUN addgroup exporter && adduser --system --no-create-home --shell /bin/false --ingroup exporter exporter
+RUN addgroup --gid 1000 exporter && adduser --uid 1000 --system --no-create-home --shell /bin/false --ingroup exporter exporter
 USER exporter
 
 ENV CONFIG_FILE="/config.yaml"