Patching to fix CVE-2026-23950 alert (#272)

* patching to fix CVE alert

* update ubuntu:24.04 sha

* add cve to trivyignore

Author: BrianEllwood

.trivyignore

@@ -2,6 +2,7 @@
 # CVE-2024-21538
 CVE-2024-21538
 CVE-2025-64756
+CVE-2026-23950 exp:2026-02-21
 
 ## Trivy: misreading due to heredoc structure
 AVD-DS-0017

Dockerfile

@@ -1,6 +1,6 @@
 #checkov:skip=CKV_DOCKER_2: HEALTHCHECK not required - Health checks are implemented downstream of this image
 
-FROM public.ecr.aws/ubuntu/ubuntu:24.04@sha256:ef59d9e82939bbce08973bdffb8761b025f75369fb7d2882cdc4938b5a9e992e
+FROM public.ecr.aws/ubuntu/ubuntu:24.04@sha256:6b4c0f97bc73e76ac20ef992258e9b8c831b7755d2047d83109da8eb279881fe
 
 
 LABEL org.opencontainers.image.vendor="Ministry of Justice" \
@@ -15,8 +15,8 @@ ENV CONTAINER_USER="runner" \
     CONTAINER_GID="10000" \
     CONTAINER_HOME="/actions-runner" \
     DEBIAN_FRONTEND="noninteractive" \
-    ACTIONS_RUNNER_VERSION="2.330.0" \
-    ACTIONS_RUNNER_PKG_SHA="af5c33fa94f3cc33b8e97937939136a6b04197e6dadfcfb3b6e33ae1bf41e79a" \
+    ACTIONS_RUNNER_VERSION="2.331.0" \
+    ACTIONS_RUNNER_PKG_SHA="5fcc01bd546ba5c3f1291c2803658ebd3cedb3836489eda3be357d41bfcf28a7" \
     MICROSOFT_SQL_ODBC_VERSION="18.6.1.1-1" \
     MICROSOFT_SQL_TOOLS_VERSION="18.6.1.1-1" \
     PATH="/opt/mssql-tools18/bin:${PATH}"

test/container-structure-test.yml

@@ -29,7 +29,7 @@ commandTests:
   - name: "actions-runner"
     command: "bash"
     args: ["run.sh", "--version"]
-    expectedOutput: ["2.330.0"]
+    expectedOutput: ["2.331.0"]
 
   - name: "sqlcmd"
     command: "sqlcmd"