Merge pull request #396 from IABTechLab/gdm-UID2-5192-cleanup

Cleaned up trivyignore

Author: gmsdelmundo

.github/workflows/build-and-test.yaml

@@ -4,6 +4,6 @@ on: [pull_request, push, workflow_dispatch]
 jobs:
   build:
     uses: IABTechLab/uid2-shared-actions/.github/workflows/shared-build-and-test.yaml@v3
-    secrets: inherit
     with:
       java_version: 21
+    secrets: inherit

.trivyignore

@@ -1,10 +1,6 @@
 # List any vulnerability that are to be accepted
 # See https://aquasecurity.github.io/trivy/v0.35/docs/vulnerability/examples/filter/ 
 # for more details
-# e.g. 
-
-# https://thetradedesk.atlassian.net/browse/UID2-4460
-CVE-2024-47535
 
 # https://thetradedesk.atlassian.net/browse/UID2-5186
 CVE-2024-8176 exp:2025-03-27

Dockerfile

@@ -1,4 +1,4 @@
-# sha from https://hub.docker.com/layers/amd64/eclipse-temurin/21.0.4_7-jre-alpine/images/sha256-f184bb601f9e6068dd0a92738764d1ff447ab68c15ddbf8c303c5c29de9a1df8
+# sha from https://hub.docker.com/layers/amd64/eclipse-temurin/21.0.6_7-jre-alpine/images/sha256-f184bb601f9e6068dd0a92738764d1ff447ab68c15ddbf8c303c5c29de9a1df8
 FROM eclipse-temurin@sha256:f184bb601f9e6068dd0a92738764d1ff447ab68c15ddbf8c303c5c29de9a1df8
 
 WORKDIR /app

pom.xml

@@ -20,6 +20,7 @@
         <okta-jwt.version>0.5.10</okta-jwt.version>
         <image.version>${project.version}</image.version>
     </properties>
+
     <repositories>
         <repository>
             <id>maven-snapshots</id>
@@ -33,6 +34,7 @@
             </snapshots>
         </repository>
     </repositories>
+
     <dependencies>
         <dependency>
             <groupId>com.google.guava</groupId>
@@ -135,7 +137,6 @@
             <artifactId>okta-jwt-verifier</artifactId>
             <version>${okta-jwt.version}</version>
         </dependency>
-    
         <dependency>
             <groupId>com.okta.jwt</groupId>
             <artifactId>okta-jwt-verifier-impl</artifactId>