diff --git a/.github/workflows/cve-scan.yml b/.github/workflows/cve-scan.yml index 7cbb8c1..8ae0ddc 100644 --- a/.github/workflows/cve-scan.yml +++ b/.github/workflows/cve-scan.yml @@ -64,7 +64,7 @@ jobs: run: exit 1 - name: Send notification to Slack id: slack - if: always() && github.event_name == 'schedule' && steps.scan.outcome == 'failure' + if: always() && github.event_name == 'schedule' && steps.cve-threshold.outcome == 'failure' uses: slackapi/slack-github-action@e28cf165c92ffef168d23c5c9000cffc8a25e117 #v1.24.0 with: payload: | @@ -88,4 +88,4 @@ jobs: } env: SLACK_WEBHOOK_URL: ${{ secrets.CVE_SCAN_SLACK_WEBHOOK }} - SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK + SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK \ No newline at end of file diff --git a/Dockerfile.native b/Dockerfile.native index 790bb3c..8c3f6a2 100644 --- a/Dockerfile.native +++ b/Dockerfile.native @@ -1,14 +1,14 @@ -FROM ghcr.io/graalvm/native-image:ol8-java17-22@sha256:3210af2c1bdf6a73cd82092909e5ed4674ef09caa1b32f2b05db7f232aba72f2 AS builder +FROM ghcr.io/graalvm/native-image:ol8-java17-22.3.3@sha256:d55ebb6eec6751b87ce9d34ab1004fa088d227d90d3edb4d9b3a994e54ac285a AS builder WORKDIR /build COPY . . RUN ./mvnw clean package -Pnative -DskipTests -FROM ubuntu:jammy-20230624@sha256:0bced47fffa3361afa981854fcabcd4577cd43cebbb808cea2b1f33a3dd7f508 AS cve +FROM ubuntu:mantic-20231011@sha256:4c32aacd0f7d1d3a29e82bee76f892ba9bb6a63f17f9327ca0d97c3d39b9b0ee AS cve COPY --from=builder /build/target/rtd-ms-sender-auth*.jar . -FROM ubuntu:jammy-20230624@sha256:0bced47fffa3361afa981854fcabcd4577cd43cebbb808cea2b1f33a3dd7f508 AS runtime +FROM ubuntu:mantic-20231011@sha256:4c32aacd0f7d1d3a29e82bee76f892ba9bb6a63f17f9327ca0d97c3d39b9b0ee AS runtime EXPOSE 8080 diff --git a/pom.xml b/pom.xml index d6aa3d1..d3e9d32 100644 --- a/pom.xml +++ b/pom.xml @@ -5,12 +5,12 @@ org.springframework.boot spring-boot-starter-parent - 3.0.4 + 3.1.4 it.gov.pagopa.rtd.ms rtd-ms-sender-auth - 1.1.1 + 1.1.2 rtd-ms-sender-auth micro-service responsible to store the association between sender code and api key @@ -99,14 +99,14 @@ io.opentelemetry opentelemetry-bom - 1.30.1 + 1.31.0 pom import io.opentelemetry.instrumentation opentelemetry-instrumentation-bom-alpha - 1.30.0-alpha + 1.31.0-alpha pom import