CASMHMS-6282: Update alpine base image to resolve CVE

Cray-HPE · Oct 1, 2024 · ce7bc1b · ce7bc1b
1 parent 37e2d5e
commit ce7bc1b
Show file tree

Hide file tree

Showing 6 changed files with 10 additions and 6 deletions.
diff --git a/.version b/.version
@@ -1 +1 @@
-1.34.0
+1.35.0
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.35.0] - 2024-10-03
+
+- Update alpine base image to resolve CVE
+
 ## [1.34.0] - 2024-09-10
 
 - Snapshot now uses softwareID to find correct current imageID value

diff --git a/Dockerfile b/Dockerfile
@@ -47,7 +47,7 @@ RUN set -ex && go build -v -i -o /usr/local/bin/hms-firmware-action github.com/C
 
 ### Build python base ###
 
-FROM artifactory.algol60.net/csm-docker/stable/docker.io/library/alpine:3.17 AS deploy-base
+FROM artifactory.algol60.net/csm-docker/stable/docker.io/library/alpine:3.19 AS deploy-base
 
 COPY cmd/fw-loader/Pipfile /
 

diff --git a/Dockerfile.functionaltesting.Dockerfile b/Dockerfile.functionaltesting.Dockerfile
@@ -24,7 +24,7 @@
 
 ### Build python base ###
 
-FROM artifactory.algol60.net/csm-docker/stable/docker.io/library/alpine:3.15 AS build-base
+FROM artifactory.algol60.net/csm-docker/stable/docker.io/library/alpine:3.19 AS build-base
 
 RUN set -ex \
     && apk -U upgrade \

diff --git a/Dockerfile.integration.Dockerfile b/Dockerfile.integration.Dockerfile
@@ -47,7 +47,7 @@ RUN set -ex && go build -v -i -o /usr/local/bin/hms-firmware-action github.com/C
 
 ### Build python base ###
 
-FROM artifactory.algol60.net/csm-docker/stable/docker.io/library/alpine:3.17 AS deploy-base
+FROM artifactory.algol60.net/csm-docker/stable/docker.io/library/alpine:3.19 AS deploy-base
 
 COPY cmd/fw-loader/Pipfile /
 

diff --git a/Dockerfile.integration.tests.Dockerfile b/Dockerfile.integration.tests.Dockerfile
@@ -22,7 +22,7 @@
 
 # This file only exists as a means to run tests in an automated fashion.
 
-FROM artifactory.algol60.net/csm-docker/stable/docker.io/library/alpine:3.15 AS build-base
+FROM artifactory.algol60.net/csm-docker/stable/docker.io/library/alpine:3.19 AS build-base
 
 ENV LOG_LEVEL TRACE
 ENV API_URL "http://cray-fas"
@@ -56,4 +56,4 @@ WORKDIR src
 CMD ["sh", "-c", "set -ex; pwd; python3 -m pytest test/"]
 
 #in case you want to sleep instead of RUN
-#CMD ["sh", "-c", "sleep 1000" ]
+#CMD ["sh", "-c", "sleep 1000" ]