diff --git a/.github/workflows/container-release.yml b/.github/workflows/container-release.yml index 513257f..5241371 100644 --- a/.github/workflows/container-release.yml +++ b/.github/workflows/container-release.yml @@ -17,4 +17,6 @@ jobs: contents: write id-token: write packages: write - uses: ministryofjustice/analytical-platform-github-actions/.github/workflows/reusable-container-release.yml@0c3b5555edfbbb10220ed435359dfd6769ad79ed # v3.2.0 + uses: ministryofjustice/analytical-platform-github-actions/.github/workflows/reusable-container-release.yml@2ab174150aeb0a6003afd1c0b4316698720b3b6b # v5.5.0 + secrets: + release-failure-webhook-url: ${{ secrets.ANALYTICAL_PLATFORM_RELEASE_FAILURE_SLACK_WEBHOOK_URL }} diff --git a/.github/workflows/container-scan.yml b/.github/workflows/container-scan.yml index b08906c..2fd9fcc 100644 --- a/.github/workflows/container-scan.yml +++ b/.github/workflows/container-scan.yml @@ -13,4 +13,4 @@ jobs: name: Container Scan permissions: contents: read - uses: ministryofjustice/analytical-platform-github-actions/.github/workflows/reusable-container-scan.yml@0c3b5555edfbbb10220ed435359dfd6769ad79ed # v3.2.0 + uses: ministryofjustice/analytical-platform-github-actions/.github/workflows/reusable-container-scan.yml@2ab174150aeb0a6003afd1c0b4316698720b3b6b # v5.5.0 diff --git a/.github/workflows/container-test.yml b/.github/workflows/container-test.yml index 5a189c5..b1f1891 100644 --- a/.github/workflows/container-test.yml +++ b/.github/workflows/container-test.yml @@ -13,4 +13,5 @@ jobs: name: Container Test permissions: contents: read - uses: ministryofjustice/analytical-platform-github-actions/.github/workflows/reusable-container-test.yml@0c3b5555edfbbb10220ed435359dfd6769ad79ed # v3.2.0 + uses: ministryofjustice/analytical-platform-github-actions/.github/workflows/reusable-container-test.yml@2ab174150aeb0a6003afd1c0b4316698720b3b6b # v5.5.0 + diff --git a/.trivyignore b/.trivyignore index e8ce78e..1dbb430 100644 --- a/.trivyignore +++ b/.trivyignore @@ -1 +1,10 @@ # As of 03/06/2025 there are no vulnerabilities to skip in docker.io/openresty/openresty:1.27.1.2-1-alpine-fat + +# alpine 3.21.3 - sha is set to latest so no fix +CVE-2025-64720 exp:2026-03-17 +CVE-2025-65018 exp:2026-03-17 +CVE-2025-66293 exp:2026-03-17 +CVE-2025-49794 exp:2026-03-17 +CVE-2025-49796 exp:2026-03-17 +CVE-2025-49795 exp:2026-03-17 +CVE-2025-6021 exp:2026-03-17