Hello Team,
Their has been a Critical Vulnerability detected in conformity-template-scanner-pipeline repository through Synk agent.
Below is the Snyk Agent URL for the same:-
https://app.snyk.io/org/tabcorp2/project/bfb2533e-9c5f-4243-b9f4-13d94f769d41
This Critical Vulnerability is found from the Dockerfile created from the base image of node:14.21.0-bullseye-slim
Recommended Fix for the same is to modify the base image in this Dockerfile to node:14.21.3-bullseye-slim
This will remove the Critical Vulnerability from this repository.
Please let me know if we could make these changes to correct the same.
Thanks and Regards,
Sanjay Vanvani