daenamnu/discordeno
1
0
Fork 0
mirror of https://github.com/discordeno/discordeno.git synced 2026-09-17 08:47:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(docker): prevent snyk null in severity scores for unassigned CVEs (#3746)

Browse Source 
* Fix snyk null in severity scores for unassigned CVEs

* Keep node 18
This commit is contained in:
Fleny
2024-07-20 16:54:11 -05:00
committed by GitHub
parent 4778968aba
commit 31222855d8
2 changed files with 7 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/docker-app-rest-passthrough.yml
+4 -3
View File
@@ -136,11 +136,12 @@ jobs:
with:
image: 'discordeno/app-rest-passthrough:latest'
args: --file=docker-apps/rest-passthrough/Dockerfile
# See https://github.com/github/codeql-action/issues/2187#issuecomment-2043220400 for for info
- name: Replace security-severity undefined for license-related findings
# Snyk will use a security-severify of "null" when the CVE didn't get an assigned score
- name: Replace security-severity null for non assigned CVE scores
if: ${{ github.event_name == 'schedule' || github.event_name == 'push' }}
run: |
sed -i 's/"security-severity": "undefined"/"security-severity": "0"/g' snyk.sarif
sed -i 's/"security-severity": "null"/"security-severity": "0"/g' snyk.sarif
sed -i 's/"cvssv3_baseScore": null/"cvssv3_baseScore": 0/g' snyk.sarif
- name: Upload snyk scan results to GitHub Security tab
if: ${{ github.event_name == 'schedule' || github.event_name == 'push' }}
uses: github/codeql-action/upload-sarif@v3
docker-apps/rest-passthrough/Dockerfile
+3 -3
View File
@@ -9,7 +9,7 @@
# the final image, with only the dependencies and compiled files
# build only with the platform of the host machine, since it only uses for dev purposes
FROM --platform=$BUILDPLATFORM node:18.19.0-alpine3.19 AS deps
FROM --platform=$BUILDPLATFORM node:18.20.4-alpine3.20 AS deps
WORKDIR /app
# copy necessary for install dependencies
COPY package.json yarn.lock .yarnrc.yml ./
@@ -18,7 +18,7 @@ COPY ./.yarn/releases ./.yarn/releases
RUN yarn install --immutable
# build only with the platform of the host machine, since we just need its files
FROM --platform=$BUILDPLATFORM node:18.19.0-alpine3.19 AS builder
FROM --platform=$BUILDPLATFORM node:18.20.4-alpine3.20 AS builder
# copy the dependencies (node_modules) from the deps image
COPY --from=deps /app /app
WORKDIR /app
@@ -29,7 +29,7 @@ COPY .swcrc ./
# compile the files
RUN yarn build
FROM node:18.19.0-alpine3.19 AS runner
FROM node:18.20.4-alpine3.20 AS runner
# copy the compiled files from the builder image
COPY --from=builder /app/dist /app/dist
# copy the dependencies from the deps image