From 98d2a175d871a0bd16aba3c8ee8568f2ce5dc693 Mon Sep 17 00:00:00 2001 From: Juan Correa Date: Thu, 6 Mar 2025 13:45:15 -0500 Subject: [PATCH] build: configure grype image scan (#1158) * build: configure grype image scan * build: update README --- .circleci/config.yml | 2 +- .grype.yaml | 18 ++++ .nvmrc | 2 +- README.md | 10 +- package-lock.json | 241 ++++++++++++++++++++++++++++++++++++++++--- package.json | 4 +- 6 files changed, 256 insertions(+), 21 deletions(-) create mode 100644 .grype.yaml diff --git a/.circleci/config.yml b/.circleci/config.yml index 3b9b1ea78..6bd267c62 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -1,7 +1,7 @@ version: 2.1 setup: true orbs: - build: mojaloop/build@1.0.53 + build: mojaloop/build@1.0.58 workflows: setup: jobs: diff --git a/.grype.yaml b/.grype.yaml new file mode 100644 index 000000000..ef2d22205 --- /dev/null +++ b/.grype.yaml @@ -0,0 +1,18 @@ +ignore: + # Ignore cross-spawn vulnerabilities by CVE ID due to false positive + # as grype looks at package-lock.json where it shows versions with + # vulnerabilities, npm ls shows only 7.0.6 verion is used + - vulnerability: "GHSA-3xgq-45jj-v275" + package: + name: "cross-spawn" + +# Set output format defaults +output: + - "table" + - "json" + +# Modify your CircleCI job to check critical count +search: + scope: "squashed" +quiet: false +check-for-app-update: false diff --git a/.nvmrc b/.nvmrc index 17719ce25..1fc51668f 100644 --- a/.nvmrc +++ b/.nvmrc @@ -1 +1 @@ -18.20.4 +18.20.6 diff --git a/README.md b/README.md index 3523eff6f..d97f8442b 100644 --- a/README.md +++ b/README.md @@ -374,13 +374,13 @@ The [audit-ci.jsonc](./audit-ci.jsonc) contains any audit-exceptions that cannot ## Container Scans -As part of our CI/CD process, we use anchore-cli to scan our built docker container for vulnerabilities upon release. +As part of our CI/CD process, we use grype a vulnerability scanner for container images and filesystems upon release. -If you find your release builds are failing, refer to the [container scanning](https://github.com/mojaloop/ci-config#container-scanning) in our shared Mojaloop CI config repo. There is a good chance you simply need to update the `mojaloop-policy-generator.js` file and re-run the circleci workflow. +If you find your release builds are failing, please review Mojaloop orb with grype image scan at [container scanning](https://github.com/mojaloop/ci-config-orb-build?tab=readme-ov-file#vulnerability-image-scan-configuration) and review [grype_image_scan.yml](https://github.com/mojaloop/ci-config-orb-build/blob/main/src/jobs/grype_image_scan.yml) job. -For more information on anchore and anchore-cli, refer to: - - [Anchore CLI](https://github.com/anchore/anchore-cli) - - [Circle Orb Registry](https://circleci.com/orbs/registry/orb/anchore/anchore-engine) +For more information on grype, refer to: + +- [Grype](https://github.com/anchore/grype) ## Automated Releases diff --git a/package-lock.json b/package-lock.json index bd0f5d5a0..bd0143ba4 100644 --- a/package-lock.json +++ b/package-lock.json @@ -12,7 +12,7 @@ "@hapi/basic": "7.0.2", "@hapi/catbox-memory": "6.0.2", "@hapi/good": "9.0.1", - "@hapi/hapi": "21.3.12", + "@hapi/hapi": "21.4.0", "@hapi/inert": "7.1.0", "@hapi/vision": "7.0.3", "@mojaloop/central-services-error-handling": "13.0.7", @@ -23,7 +23,7 @@ "@mojaloop/central-services-stream": "11.5.1", "@mojaloop/database-lib": "11.1.3", "@mojaloop/event-sdk": "14.1.5", - "@mojaloop/inter-scheme-proxy-cache-lib": "2.3.3", + "@mojaloop/inter-scheme-proxy-cache-lib": "2.3.7", "@mojaloop/ml-number": "11.2.7", "@mojaloop/object-store-lib": "12.0.6", "@now-ims/hapi-now-auth": "2.1.0", @@ -681,6 +681,7 @@ "version": "6.0.1", "resolved": "https://registry.npmjs.org/@hapi/cryptiles/-/cryptiles-6.0.1.tgz", "integrity": "sha512-9GM9ECEHfR8lk5ASOKG4+4ZsEzFqLfhiryIJ2ISePVB92OHLp/yne4m+zn7z9dgvM98TLpiFebjDFQ0UHcqxXQ==", + "license": "BSD-3-Clause", "dependencies": { "@hapi/boom": "^10.0.1" }, @@ -710,9 +711,10 @@ "integrity": "sha512-/c6rf4UJlmHlC9b5BaNvzAcFv7HZ2QHaV0D4/HNlBdvFnvQq8RI4kYdhyPCl7Xj+oWvTWQ8ujhqS53LIgAe6KQ==" }, "node_modules/@hapi/hapi": { - "version": "21.3.12", - "resolved": "https://registry.npmjs.org/@hapi/hapi/-/hapi-21.3.12.tgz", - "integrity": "sha512-GCUP12dkb3QMjpFl+wEFO73nqKRmsnD5um/QDOn6lj2GjGBrDXPcT194mNARO+PPNXZOR4KmvIpHt/lceUncfg==", + "version": "21.4.0", + "resolved": "https://registry.npmjs.org/@hapi/hapi/-/hapi-21.4.0.tgz", + "integrity": "sha512-kqiRWbYYLSSt2rYbxyNj8svPsXP715p4W/K3OXpXeiiVLNSdBX4f+zfmC+dY6eyb6rqTqTAbx6x8b5HpJTkviQ==", + "license": "BSD-3-Clause", "dependencies": { "@hapi/accept": "^6.0.3", "@hapi/ammo": "^6.0.1", @@ -727,7 +729,7 @@ "@hapi/podium": "^5.0.1", "@hapi/shot": "^6.0.1", "@hapi/somever": "^4.1.1", - "@hapi/statehood": "^8.1.1", + "@hapi/statehood": "^8.2.0", "@hapi/subtext": "^8.1.0", "@hapi/teamwork": "^6.0.0", "@hapi/topo": "^6.0.2", @@ -796,6 +798,7 @@ "version": "7.0.1", "resolved": "https://registry.npmjs.org/@hapi/iron/-/iron-7.0.1.tgz", "integrity": "sha512-tEZnrOujKpS6jLKliyWBl3A9PaE+ppuL/+gkbyPPDb/l2KSKQyH4lhMkVb+sBhwN+qaxxlig01JRqB8dk/mPxQ==", + "license": "BSD-3-Clause", "dependencies": { "@hapi/b64": "^6.0.1", "@hapi/boom": "^10.0.1", @@ -905,9 +908,10 @@ } }, "node_modules/@hapi/statehood": { - "version": "8.1.1", - "resolved": "https://registry.npmjs.org/@hapi/statehood/-/statehood-8.1.1.tgz", - "integrity": "sha512-YbK7PSVUA59NArAW5Np0tKRoIZ5VNYUicOk7uJmWZF6XyH5gGL+k62w77SIJb0AoAJ0QdGQMCQ/WOGL1S3Ydow==", + "version": "8.2.0", + "resolved": "https://registry.npmjs.org/@hapi/statehood/-/statehood-8.2.0.tgz", + "integrity": "sha512-63JlCVIrsmuunWsyc3OeuFO+gH6v56swLCl7OM1w09l/exQKPUxSUDF2Slkuw8k91nIzr0A2/aPvjLOWf9ksrg==", + "license": "BSD-3-Clause", "dependencies": { "@hapi/boom": "^10.0.1", "@hapi/bounce": "^3.0.1", @@ -922,6 +926,7 @@ "version": "2.0.1", "resolved": "https://registry.npmjs.org/@hapi/validate/-/validate-2.0.1.tgz", "integrity": "sha512-NZmXRnrSLK8MQ9y/CMqE9WSspgB9xA41/LlYR0k967aSZebWr4yNrpxIbov12ICwKy4APSlWXZga9jN5p6puPA==", + "license": "BSD-3-Clause", "dependencies": { "@hapi/hoek": "^11.0.2", "@hapi/topo": "^6.0.1" @@ -1267,6 +1272,45 @@ } } }, + "node_modules/@mojaloop/central-services-health/node_modules/@hapi/hapi": { + "version": "21.3.12", + "resolved": "https://registry.npmjs.org/@hapi/hapi/-/hapi-21.3.12.tgz", + "integrity": "sha512-GCUP12dkb3QMjpFl+wEFO73nqKRmsnD5um/QDOn6lj2GjGBrDXPcT194mNARO+PPNXZOR4KmvIpHt/lceUncfg==", + "license": "BSD-3-Clause", + "dependencies": { + "@hapi/accept": "^6.0.3", + "@hapi/ammo": "^6.0.1", + "@hapi/boom": "^10.0.1", + "@hapi/bounce": "^3.0.2", + "@hapi/call": "^9.0.1", + "@hapi/catbox": "^12.1.1", + "@hapi/catbox-memory": "^6.0.2", + "@hapi/heavy": "^8.0.1", + "@hapi/hoek": "^11.0.6", + "@hapi/mimos": "^7.0.1", + "@hapi/podium": "^5.0.1", + "@hapi/shot": "^6.0.1", + "@hapi/somever": "^4.1.1", + "@hapi/statehood": "^8.1.1", + "@hapi/subtext": "^8.1.0", + "@hapi/teamwork": "^6.0.0", + "@hapi/topo": "^6.0.2", + "@hapi/validate": "^2.0.1" + }, + "engines": { + "node": ">=14.15.0" + } + }, + "node_modules/@mojaloop/central-services-health/node_modules/@hapi/validate": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/@hapi/validate/-/validate-2.0.1.tgz", + "integrity": "sha512-NZmXRnrSLK8MQ9y/CMqE9WSspgB9xA41/LlYR0k967aSZebWr4yNrpxIbov12ICwKy4APSlWXZga9jN5p6puPA==", + "license": "BSD-3-Clause", + "dependencies": { + "@hapi/hoek": "^11.0.2", + "@hapi/topo": "^6.0.1" + } + }, "node_modules/@mojaloop/central-services-logger": { "version": "11.5.5", "resolved": "https://registry.npmjs.org/@mojaloop/central-services-logger/-/central-services-logger-11.5.5.tgz", @@ -1362,11 +1406,97 @@ "@hapi/hoek": "9.x.x" } }, + "node_modules/@mojaloop/central-services-shared/node_modules/@hapi/hapi": { + "version": "21.3.12", + "resolved": "https://registry.npmjs.org/@hapi/hapi/-/hapi-21.3.12.tgz", + "integrity": "sha512-GCUP12dkb3QMjpFl+wEFO73nqKRmsnD5um/QDOn6lj2GjGBrDXPcT194mNARO+PPNXZOR4KmvIpHt/lceUncfg==", + "license": "BSD-3-Clause", + "dependencies": { + "@hapi/accept": "^6.0.3", + "@hapi/ammo": "^6.0.1", + "@hapi/boom": "^10.0.1", + "@hapi/bounce": "^3.0.2", + "@hapi/call": "^9.0.1", + "@hapi/catbox": "^12.1.1", + "@hapi/catbox-memory": "^6.0.2", + "@hapi/heavy": "^8.0.1", + "@hapi/hoek": "^11.0.6", + "@hapi/mimos": "^7.0.1", + "@hapi/podium": "^5.0.1", + "@hapi/shot": "^6.0.1", + "@hapi/somever": "^4.1.1", + "@hapi/statehood": "^8.1.1", + "@hapi/subtext": "^8.1.0", + "@hapi/teamwork": "^6.0.0", + "@hapi/topo": "^6.0.2", + "@hapi/validate": "^2.0.1" + }, + "engines": { + "node": ">=14.15.0" + } + }, + "node_modules/@mojaloop/central-services-shared/node_modules/@hapi/hapi/node_modules/@hapi/boom": { + "version": "10.0.1", + "resolved": "https://registry.npmjs.org/@hapi/boom/-/boom-10.0.1.tgz", + "integrity": "sha512-ERcCZaEjdH3OgSJlyjVk8pHIFeus91CjKP3v+MpgBNp5IvGzP2l/bRiD78nqYcKPaZdbKkK5vDBVPd2ohHBlsA==", + "license": "BSD-3-Clause", + "dependencies": { + "@hapi/hoek": "^11.0.2" + } + }, + "node_modules/@mojaloop/central-services-shared/node_modules/@hapi/hapi/node_modules/@hapi/catbox-memory": { + "version": "6.0.2", + "resolved": "https://registry.npmjs.org/@hapi/catbox-memory/-/catbox-memory-6.0.2.tgz", + "integrity": "sha512-H1l4ugoFW/ZRkqeFrIo8p1rWN0PA4MDTfu4JmcoNDvnY975o29mqoZblqFTotxNHlEkMPpIiIBJTV+Mbi+aF0g==", + "license": "BSD-3-Clause", + "dependencies": { + "@hapi/boom": "^10.0.1", + "@hapi/hoek": "^11.0.2" + } + }, + "node_modules/@mojaloop/central-services-shared/node_modules/@hapi/hapi/node_modules/@hapi/hoek": { + "version": "11.0.7", + "resolved": "https://registry.npmjs.org/@hapi/hoek/-/hoek-11.0.7.tgz", + "integrity": "sha512-HV5undWkKzcB4RZUusqOpcgxOaq6VOAH7zhhIr2g3G8NF/MlFO75SjOr2NfuSx0Mh40+1FqCkagKLJRykUWoFQ==", + "license": "BSD-3-Clause" + }, "node_modules/@mojaloop/central-services-shared/node_modules/@hapi/hoek": { "version": "9.3.0", "resolved": "https://registry.npmjs.org/@hapi/hoek/-/hoek-9.3.0.tgz", "integrity": "sha512-/c6rf4UJlmHlC9b5BaNvzAcFv7HZ2QHaV0D4/HNlBdvFnvQq8RI4kYdhyPCl7Xj+oWvTWQ8ujhqS53LIgAe6KQ==" }, + "node_modules/@mojaloop/central-services-shared/node_modules/@hapi/validate": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/@hapi/validate/-/validate-2.0.1.tgz", + "integrity": "sha512-NZmXRnrSLK8MQ9y/CMqE9WSspgB9xA41/LlYR0k967aSZebWr4yNrpxIbov12ICwKy4APSlWXZga9jN5p6puPA==", + "license": "BSD-3-Clause", + "dependencies": { + "@hapi/hoek": "^11.0.2", + "@hapi/topo": "^6.0.1" + } + }, + "node_modules/@mojaloop/central-services-shared/node_modules/@hapi/validate/node_modules/@hapi/hoek": { + "version": "11.0.7", + "resolved": "https://registry.npmjs.org/@hapi/hoek/-/hoek-11.0.7.tgz", + "integrity": "sha512-HV5undWkKzcB4RZUusqOpcgxOaq6VOAH7zhhIr2g3G8NF/MlFO75SjOr2NfuSx0Mh40+1FqCkagKLJRykUWoFQ==", + "license": "BSD-3-Clause" + }, + "node_modules/@mojaloop/central-services-shared/node_modules/@mojaloop/inter-scheme-proxy-cache-lib": { + "version": "2.3.3", + "resolved": "https://registry.npmjs.org/@mojaloop/inter-scheme-proxy-cache-lib/-/inter-scheme-proxy-cache-lib-2.3.3.tgz", + "integrity": "sha512-WViXF8++KZULO/Rf45VBWS7sOCx8pf82EauuERHFB5EcIq32QI+9SsvcDbe8dgecGW5PevXjaHuV+30FQ4YijQ==", + "license": "Apache-2.0", + "dependencies": { + "@mojaloop/central-services-logger": "11.5.5", + "ajv": "8.17.1", + "convict": "6.2.4", + "fast-safe-stringify": "2.1.1", + "ioredis": "5.5.0" + }, + "engines": { + "node": ">=18.x" + } + }, "node_modules/@mojaloop/central-services-stream": { "version": "11.5.1", "resolved": "https://registry.npmjs.org/@mojaloop/central-services-stream/-/central-services-stream-11.5.1.tgz", @@ -1445,9 +1575,10 @@ } }, "node_modules/@mojaloop/inter-scheme-proxy-cache-lib": { - "version": "2.3.3", - "resolved": "https://registry.npmjs.org/@mojaloop/inter-scheme-proxy-cache-lib/-/inter-scheme-proxy-cache-lib-2.3.3.tgz", - "integrity": "sha512-WViXF8++KZULO/Rf45VBWS7sOCx8pf82EauuERHFB5EcIq32QI+9SsvcDbe8dgecGW5PevXjaHuV+30FQ4YijQ==", + "version": "2.3.7", + "resolved": "https://registry.npmjs.org/@mojaloop/inter-scheme-proxy-cache-lib/-/inter-scheme-proxy-cache-lib-2.3.7.tgz", + "integrity": "sha512-6BeV+JTuHDBrLlcT3QIfK9yZKArjdwbdggC7KSJhONCORjXWifZWewktlQ88gUfRXzVGFp2+jM6QEJ4CTm2Mpg==", + "license": "Apache-2.0", "dependencies": { "@mojaloop/central-services-logger": "11.5.5", "ajv": "8.17.1", @@ -1502,11 +1633,81 @@ "@hapi/hoek": "9.x.x" } }, + "node_modules/@mojaloop/ml-schema-transformer-lib/node_modules/@hapi/hapi": { + "version": "21.3.12", + "resolved": "https://registry.npmjs.org/@hapi/hapi/-/hapi-21.3.12.tgz", + "integrity": "sha512-GCUP12dkb3QMjpFl+wEFO73nqKRmsnD5um/QDOn6lj2GjGBrDXPcT194mNARO+PPNXZOR4KmvIpHt/lceUncfg==", + "license": "BSD-3-Clause", + "dependencies": { + "@hapi/accept": "^6.0.3", + "@hapi/ammo": "^6.0.1", + "@hapi/boom": "^10.0.1", + "@hapi/bounce": "^3.0.2", + "@hapi/call": "^9.0.1", + "@hapi/catbox": "^12.1.1", + "@hapi/catbox-memory": "^6.0.2", + "@hapi/heavy": "^8.0.1", + "@hapi/hoek": "^11.0.6", + "@hapi/mimos": "^7.0.1", + "@hapi/podium": "^5.0.1", + "@hapi/shot": "^6.0.1", + "@hapi/somever": "^4.1.1", + "@hapi/statehood": "^8.1.1", + "@hapi/subtext": "^8.1.0", + "@hapi/teamwork": "^6.0.0", + "@hapi/topo": "^6.0.2", + "@hapi/validate": "^2.0.1" + }, + "engines": { + "node": ">=14.15.0" + } + }, + "node_modules/@mojaloop/ml-schema-transformer-lib/node_modules/@hapi/hapi/node_modules/@hapi/boom": { + "version": "10.0.1", + "resolved": "https://registry.npmjs.org/@hapi/boom/-/boom-10.0.1.tgz", + "integrity": "sha512-ERcCZaEjdH3OgSJlyjVk8pHIFeus91CjKP3v+MpgBNp5IvGzP2l/bRiD78nqYcKPaZdbKkK5vDBVPd2ohHBlsA==", + "license": "BSD-3-Clause", + "dependencies": { + "@hapi/hoek": "^11.0.2" + } + }, + "node_modules/@mojaloop/ml-schema-transformer-lib/node_modules/@hapi/hapi/node_modules/@hapi/catbox-memory": { + "version": "6.0.2", + "resolved": "https://registry.npmjs.org/@hapi/catbox-memory/-/catbox-memory-6.0.2.tgz", + "integrity": "sha512-H1l4ugoFW/ZRkqeFrIo8p1rWN0PA4MDTfu4JmcoNDvnY975o29mqoZblqFTotxNHlEkMPpIiIBJTV+Mbi+aF0g==", + "license": "BSD-3-Clause", + "dependencies": { + "@hapi/boom": "^10.0.1", + "@hapi/hoek": "^11.0.2" + } + }, + "node_modules/@mojaloop/ml-schema-transformer-lib/node_modules/@hapi/hapi/node_modules/@hapi/hoek": { + "version": "11.0.7", + "resolved": "https://registry.npmjs.org/@hapi/hoek/-/hoek-11.0.7.tgz", + "integrity": "sha512-HV5undWkKzcB4RZUusqOpcgxOaq6VOAH7zhhIr2g3G8NF/MlFO75SjOr2NfuSx0Mh40+1FqCkagKLJRykUWoFQ==", + "license": "BSD-3-Clause" + }, "node_modules/@mojaloop/ml-schema-transformer-lib/node_modules/@hapi/hoek": { "version": "9.3.0", "resolved": "https://registry.npmjs.org/@hapi/hoek/-/hoek-9.3.0.tgz", "integrity": "sha512-/c6rf4UJlmHlC9b5BaNvzAcFv7HZ2QHaV0D4/HNlBdvFnvQq8RI4kYdhyPCl7Xj+oWvTWQ8ujhqS53LIgAe6KQ==" }, + "node_modules/@mojaloop/ml-schema-transformer-lib/node_modules/@hapi/validate": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/@hapi/validate/-/validate-2.0.1.tgz", + "integrity": "sha512-NZmXRnrSLK8MQ9y/CMqE9WSspgB9xA41/LlYR0k967aSZebWr4yNrpxIbov12ICwKy4APSlWXZga9jN5p6puPA==", + "license": "BSD-3-Clause", + "dependencies": { + "@hapi/hoek": "^11.0.2", + "@hapi/topo": "^6.0.1" + } + }, + "node_modules/@mojaloop/ml-schema-transformer-lib/node_modules/@hapi/validate/node_modules/@hapi/hoek": { + "version": "11.0.7", + "resolved": "https://registry.npmjs.org/@hapi/hoek/-/hoek-11.0.7.tgz", + "integrity": "sha512-HV5undWkKzcB4RZUusqOpcgxOaq6VOAH7zhhIr2g3G8NF/MlFO75SjOr2NfuSx0Mh40+1FqCkagKLJRykUWoFQ==", + "license": "BSD-3-Clause" + }, "node_modules/@mojaloop/ml-schema-transformer-lib/node_modules/@mojaloop/central-services-error-handling": { "version": "13.0.6", "resolved": "https://registry.npmjs.org/@mojaloop/central-services-error-handling/-/central-services-error-handling-13.0.6.tgz", @@ -1575,6 +1776,22 @@ } } }, + "node_modules/@mojaloop/ml-schema-transformer-lib/node_modules/@mojaloop/inter-scheme-proxy-cache-lib": { + "version": "2.3.3", + "resolved": "https://registry.npmjs.org/@mojaloop/inter-scheme-proxy-cache-lib/-/inter-scheme-proxy-cache-lib-2.3.3.tgz", + "integrity": "sha512-WViXF8++KZULO/Rf45VBWS7sOCx8pf82EauuERHFB5EcIq32QI+9SsvcDbe8dgecGW5PevXjaHuV+30FQ4YijQ==", + "license": "Apache-2.0", + "dependencies": { + "@mojaloop/central-services-logger": "11.5.5", + "ajv": "8.17.1", + "convict": "6.2.4", + "fast-safe-stringify": "2.1.1", + "ioredis": "5.5.0" + }, + "engines": { + "node": ">=18.x" + } + }, "node_modules/@mojaloop/ml-schema-transformer-lib/node_modules/@mojaloop/sdk-standard-components": { "version": "19.6.6", "resolved": "https://registry.npmjs.org/@mojaloop/sdk-standard-components/-/sdk-standard-components-19.6.6.tgz", diff --git a/package.json b/package.json index 90def3c80..67a390f80 100644 --- a/package.json +++ b/package.json @@ -84,7 +84,7 @@ "@hapi/basic": "7.0.2", "@hapi/catbox-memory": "6.0.2", "@hapi/good": "9.0.1", - "@hapi/hapi": "21.3.12", + "@hapi/hapi": "21.4.0", "@hapi/inert": "7.1.0", "@hapi/vision": "7.0.3", "@mojaloop/central-services-error-handling": "13.0.7", @@ -95,7 +95,7 @@ "@mojaloop/central-services-stream": "11.5.1", "@mojaloop/database-lib": "11.1.3", "@mojaloop/event-sdk": "14.1.5", - "@mojaloop/inter-scheme-proxy-cache-lib": "2.3.3", + "@mojaloop/inter-scheme-proxy-cache-lib": "2.3.7", "@mojaloop/ml-number": "11.2.7", "@mojaloop/object-store-lib": "12.0.6", "@now-ims/hapi-now-auth": "2.1.0",