diff --git a/.trivyignore b/.trivyignore index bc0596998..eaace6938 100644 --- a/.trivyignore +++ b/.trivyignore @@ -1,3 +1,2 @@ -CVE-2022-23628 -CVE-2022-28946 -CVE-2022-28948 +CVE-2022-32149 +GHSA-69ch-w2m2-3vjp diff --git a/docker/Dockerfile b/docker/Dockerfile index a2ac532e4..da34fcfde 100644 --- a/docker/Dockerfile +++ b/docker/Dockerfile @@ -1,4 +1,4 @@ -FROM python:3-alpine as base +FROM python:3.10-alpine as base # Build dependencies FROM base as builder diff --git a/helm/Chart.yaml b/helm/Chart.yaml index dde5686e8..770cf1594 100644 --- a/helm/Chart.yaml +++ b/helm/Chart.yaml @@ -3,7 +3,7 @@ name: connaisseur description: Helm chart for Connaisseur - a Kubernetes admission controller to integrate container image signature verification and trust pinning into a cluster. type: application version: 1.4.4 -appVersion: 2.6.4 +appVersion: 2.6.5 keywords: - container image - signature diff --git a/helm/values.yaml b/helm/values.yaml index 9baad92a6..1450f8e5b 100644 --- a/helm/values.yaml +++ b/helm/values.yaml @@ -1,7 +1,7 @@ # configure Connaisseur deployment deployment: replicasCount: 3 - image: securesystemsengineering/connaisseur:v2.6.4 + image: securesystemsengineering/connaisseur:v2.6.5 imagePullPolicy: IfNotPresent # imagePullSecrets contains an optional list of Kubernetes Secrets, in Connaisseur namespace, # that are needed to access the registry containing Connaisseur image.