chore(deps): Use latest available Python 3.12 base image

.github/.container-structure-test-config.yaml

@@ -20,7 +20,7 @@ commandTests:
   args:
   - --version
   expectedOutput:
-  - ^gcc \(Alpine 12\.
+  - ^gcc \(Alpine 14\.
 
 - name: checkov
   command: checkov
@@ -131,7 +131,7 @@ commandTests:
   args:
   - -V
   expectedError:
-  - ^OpenSSH_9\.[0-9]+
+  - ^OpenSSH_10\.[0-9]+
 
 fileExistenceTests:
 - name: terrascan init

Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.12.0-alpine3.17@sha256:fc34b07ec97a4f288bc17083d288374a803dd59800399c76b977016c9fe5b8f2 AS python_base
+FROM python:3.12-alpine@sha256:9b8808206f4a956130546a32cbdd8633bc973b19db2923b7298e6f90cc26db08 AS python_base
 
 FROM python_base AS builder
 ARG TARGETOS
@@ -20,7 +20,7 @@
 #
 # Install required tools
 #
 ARG PRE_COMMIT_VERSION=${PRE_COMMIT_VERSION:-latest}
 RUN touch /.env && \
     if [ "$PRE_COMMIT_VERSION" = "false" ]; then \
         echo "Vital software can't be skipped" && exit 1; \
@@ -31,18 +31,18 @@
 # Install tools
 #
 ARG OPENTOFU_VERSION=${OPENTOFU_VERSION:-false}
 ARG TERRAFORM_VERSION=${TERRAFORM_VERSION:-false}
 
 ARG CHECKOV_VERSION=${CHECKOV_VERSION:-false}
 ARG HCLEDIT_VERSION=${HCLEDIT_VERSION:-false}
 ARG INFRACOST_VERSION=${INFRACOST_VERSION:-false}
 ARG TERRAFORM_DOCS_VERSION=${TERRAFORM_DOCS_VERSION:-false}
 ARG TERRAGRUNT_VERSION=${TERRAGRUNT_VERSION:-false}
 ARG TERRASCAN_VERSION=${TERRASCAN_VERSION:-false}
 ARG TFLINT_VERSION=${TFLINT_VERSION:-false}
 ARG TFSEC_VERSION=${TFSEC_VERSION:-false}
 ARG TFUPDATE_VERSION=${TFUPDATE_VERSION:-false}
 ARG TRIVY_VERSION=${TRIVY_VERSION:-false}
 
 
 # Tricky thing to install all tools by set only one arg.
@@ -116,11 +116,11 @@
     bash=~5 \
     # pre-commit-hooks deps: https://github.com/pre-commit/pre-commit-hooks
     musl-dev=~1 \
-    gcc=~12 \
+    gcc=~14 \
     # entrypoint wrapper deps
     su-exec=~0.2 \
     # ssh-client for external private module in ssh
-    openssh-client=~9
+    openssh-client=~10
 
 # Copy tools
 COPY --from=builder \
@@ -148,9 +148,9 @@
 
 COPY tools/entrypoint.sh /entrypoint.sh
 
 ENV PRE_COMMIT_COLOR=${PRE_COMMIT_COLOR:-always}
 
 ENV INFRACOST_API_KEY=${INFRACOST_API_KEY:-}
 ENV INFRACOST_SKIP_UPDATE_CHECK=${INFRACOST_SKIP_UPDATE_CHECK:-false}
 
 ENTRYPOINT [ "/entrypoint.sh" ]

tools/install/checkov.sh

@@ -9,7 +9,7 @@ readonly SCRIPT_DIR
 #
 
 apk add --no-cache \
-  gcc=~12 \
+  gcc=~14 \
   libffi-dev=~3 \
   musl-dev=~1