fix: replace asdf installation method for aws cli with apk #26

Santhin · 2023-07-04T07:11:32Z

changes:

replaced asdf with apk for aws cli

github-actions · 2023-07-04T07:18:47Z

Checkov

	check_id	file	resource	check_name	guideline
0	CKV_DOCKER_2	/app/Dockerfile	/app/Dockerfile.	Ensure that HEALTHCHECK instructions have been added to container images	https://docs.bridgecrew.io/docs/ensure-that-healthcheck-instructions-have-been-added-to-container-images

github-actions · 2023-07-04T07:19:23Z

Trivy

PkgName	InstalledVersion	Severity	Title	CVE URL
openssh	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-client-common	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-client-default	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-keygen	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-server	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-server-common	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-sftp-server	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531

github-actions · 2023-07-04T08:00:14Z

Checkov

	check_id	file	resource	check_name	guideline
0	CKV_DOCKER_2	/app/Dockerfile	/app/Dockerfile.	Ensure that HEALTHCHECK instructions have been added to container images	https://docs.bridgecrew.io/docs/ensure-that-healthcheck-instructions-have-been-added-to-container-images

github-actions · 2023-07-04T08:00:44Z

Trivy

PkgName	InstalledVersion	Severity	Title	CVE URL
openssh	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-client-common	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-client-default	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-keygen	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-server	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-server-common	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-sftp-server	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531

github-actions · 2023-07-04T08:15:16Z

Checkov

	check_id	file	resource	check_name	guideline
0	CKV_DOCKER_2	/app/Dockerfile	/app/Dockerfile.	Ensure that HEALTHCHECK instructions have been added to container images	https://docs.bridgecrew.io/docs/ensure-that-healthcheck-instructions-have-been-added-to-container-images

github-actions · 2023-07-04T08:15:45Z

Trivy

PkgName	InstalledVersion	Severity	Title	CVE URL
openssh	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-client-common	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-client-default	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-keygen	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-server	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-server-common	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-sftp-server	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531

dgniewek

Please Bump version of all tools and pin them to the newest (lines 7-22)

app/Dockerfile

github-actions · 2023-07-04T08:33:31Z

Checkov

	check_id	file	resource	check_name	guideline
0	CKV_DOCKER_2	/app/Dockerfile	/app/Dockerfile.	Ensure that HEALTHCHECK instructions have been added to container images	https://docs.bridgecrew.io/docs/ensure-that-healthcheck-instructions-have-been-added-to-container-images

github-actions · 2023-07-04T08:34:01Z

Trivy

PkgName	InstalledVersion	Severity	Title	CVE URL
openssh	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-client-common	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-client-default	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-keygen	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-server	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-server-common	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-sftp-server	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531

github-actions · 2023-07-04T09:10:24Z

Checkov

	check_id	file	resource	check_name	guideline
0	CKV_DOCKER_2	/app/Dockerfile	/app/Dockerfile.	Ensure that HEALTHCHECK instructions have been added to container images	https://docs.bridgecrew.io/docs/ensure-that-healthcheck-instructions-have-been-added-to-container-images

github-actions · 2023-07-04T09:10:53Z

Trivy

PkgName	InstalledVersion	Severity	Title	CVE URL
openssh	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-client-common	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-client-default	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-keygen	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-server	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-server-common	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531
openssh-sftp-server	9.1_p1-r2	CRITICAL	openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.	https://avd.aquasec.com/nvd/cve-2023-28531

github-actions · 2023-07-04T09:19:38Z

The new version v2.7.1 has been released 🎉

chore: repair aws cli

ca03a71

Santhin changed the title ~~chore: repair aws cli~~ fix: replace asdf installation method for aws cli with pip Jul 4, 2023

Santhin added the release/patch label Jul 4, 2023

Piotr Sierkin added 5 commits July 4, 2023 09:30

chore: replace pip with apk

1ef7ed7

test

612ea2e

test

9cbea56

test

5066760

test

bc0bf28

Piotr Sierkin added 3 commits July 4, 2023 10:01

test

099c267

chore: update docs

d3558bc

chore: remove pinned version

fa979ee

dgniewek reviewed Jul 4, 2023

View reviewed changes

app/Dockerfile Outdated Show resolved Hide resolved

chore: move awscli to layer with different apk packages

6a12572

Santhin changed the title ~~fix: replace asdf installation method for aws cli with pip~~ fix: replace asdf installation method for aws cli with apk Jul 4, 2023

Santhin requested a review from dgniewek July 4, 2023 08:45

chore: bump base image

0053a22

dgniewek approved these changes Jul 4, 2023

View reviewed changes

Santhin merged commit 95e9708 into main Jul 4, 2023

Santhin deleted the fix/repair-aws-cli branch July 4, 2023 09:17

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix: replace asdf installation method for aws cli with apk #26

fix: replace asdf installation method for aws cli with apk #26

Santhin commented Jul 4, 2023 •

edited

Loading

github-actions bot commented Jul 4, 2023

github-actions bot commented Jul 4, 2023

github-actions bot commented Jul 4, 2023

github-actions bot commented Jul 4, 2023

github-actions bot commented Jul 4, 2023

github-actions bot commented Jul 4, 2023

dgniewek left a comment

github-actions bot commented Jul 4, 2023

github-actions bot commented Jul 4, 2023

github-actions bot commented Jul 4, 2023

github-actions bot commented Jul 4, 2023

github-actions bot commented Jul 4, 2023

fix: replace asdf installation method for aws cli with apk #26

fix: replace asdf installation method for aws cli with apk #26

Conversation

Santhin commented Jul 4, 2023 • edited Loading

github-actions bot commented Jul 4, 2023

Checkov

github-actions bot commented Jul 4, 2023

Trivy

github-actions bot commented Jul 4, 2023

Checkov

github-actions bot commented Jul 4, 2023

Trivy

github-actions bot commented Jul 4, 2023

Checkov

github-actions bot commented Jul 4, 2023

Trivy

dgniewek left a comment

Choose a reason for hiding this comment

github-actions bot commented Jul 4, 2023

Checkov

github-actions bot commented Jul 4, 2023

Trivy

github-actions bot commented Jul 4, 2023

Checkov

github-actions bot commented Jul 4, 2023

Trivy

github-actions bot commented Jul 4, 2023

Santhin commented Jul 4, 2023 •

edited

Loading