From 90a4204c9c8a9f34f5f3376427b03ac22f1d99db Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 6 Oct 2022 01:23:11 +0000 Subject: [PATCH 1/4] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-UBUNTU2204-GNUPG2-3035409 - https://snyk.io/vuln/SNYK-UBUNTU2204-PERL-2789081 - https://snyk.io/vuln/SNYK-UBUNTU2204-SHADOW-2801886 - https://snyk.io/vuln/SNYK-UBUNTU2204-SHADOW-2801886 - https://snyk.io/vuln/SNYK-UBUNTU2204-ZLIB-2975633 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index bf51b10..340d407 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM ubuntu:latest +FROM ubuntu:22.04 # Install Go RUN apt-get update && apt-get install -y wget git gcc unzip From 81702074bbe8300f6cad0c55e0daa5012a61d6f0 Mon Sep 17 00:00:00 2001 From: "mend-bolt-for-github[bot]" <42819689+mend-bolt-for-github[bot]@users.noreply.github.com> Date: Mon, 21 Nov 2022 08:23:23 +0000 Subject: [PATCH 2/4] Add .whitesource configuration file --- .whitesource | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 .whitesource diff --git a/.whitesource b/.whitesource new file mode 100644 index 0000000..9c7ae90 --- /dev/null +++ b/.whitesource @@ -0,0 +1,14 @@ +{ + "scanSettings": { + "baseBranches": [] + }, + "checkRunSettings": { + "vulnerableCheckRunConclusionLevel": "failure", + "displayMode": "diff", + "useMendCheckNames": true + }, + "issueSettings": { + "minSeverityLevel": "LOW", + "issueType": "DEPENDENCY" + } +} \ No newline at end of file From cb80ee629e71aa2a24744177ff23d675cd7bc592 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 21 Nov 2022 09:59:16 +0000 Subject: [PATCH 3/4] fix: Dockerfile.Build to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN9-APT-407402 - https://snyk.io/vuln/SNYK-DEBIAN9-DPKG-2847943 - https://snyk.io/vuln/SNYK-DEBIAN9-GLIBC-356506 - https://snyk.io/vuln/SNYK-DEBIAN9-GLIBC-356506 - https://snyk.io/vuln/SNYK-DEBIAN9-GLIBC-356506 --- Dockerfile.Build | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile.Build b/Dockerfile.Build index ef3710c..0f55d7e 100644 --- a/Dockerfile.Build +++ b/Dockerfile.Build @@ -34,7 +34,7 @@ RUN go build /go/src/github.com/vwxyzjn/portwarden/web/scheduler/main.go && mv . # Ready to run EXPOSE 5000 -FROM debian:stretch-20181112 as production +FROM debian:bullseye-20221004 as production RUN apt-get update && apt-get install -y ca-certificates openssl COPY --from=builder /usr/bin/bw /usr/bin/bw COPY --from=builder /scheduler /go/src/github.com/vwxyzjn/portwarden/web/scheduler/scheduler From 78be33e40985b8a7d75cb7d35ad452510e7a6697 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 16 Aug 2023 19:19:27 +0000 Subject: [PATCH 4/4] fix: Dockerfile.Build to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN11-KRB5-3120880 - https://snyk.io/vuln/SNYK-DEBIAN11-KRB5-3120880 - https://snyk.io/vuln/SNYK-DEBIAN11-KRB5-3120880 - https://snyk.io/vuln/SNYK-DEBIAN11-LIBTASN16-3061097 - https://snyk.io/vuln/SNYK-DEBIAN11-OPENSSL-5661566 --- Dockerfile.Build | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile.Build b/Dockerfile.Build index 0f55d7e..a386079 100644 --- a/Dockerfile.Build +++ b/Dockerfile.Build @@ -34,7 +34,7 @@ RUN go build /go/src/github.com/vwxyzjn/portwarden/web/scheduler/main.go && mv . # Ready to run EXPOSE 5000 -FROM debian:bullseye-20221004 as production +FROM debian:bullseye-20230725 as production RUN apt-get update && apt-get install -y ca-certificates openssl COPY --from=builder /usr/bin/bw /usr/bin/bw COPY --from=builder /scheduler /go/src/github.com/vwxyzjn/portwarden/web/scheduler/scheduler