Skip to content

Commit 7b0b7a6

Browse files
authored
Fixed Critical CVE for argocd-app-status (#644)
* 1.1.2: fix vulnerability CVE-2019-8457 upgrading base image to python:3.11.5-slim-bookworm * Add CHANGELOG.md --------- Signed-off-by: Laurent Rochette <laurent.rochette@codefresh.io>
1 parent 17b6929 commit 7b0b7a6

File tree

4 files changed

+36
-4
lines changed

4 files changed

+36
-4
lines changed
Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
# Changelog
2+
## [1.1.2] - 2023-09-18
3+
### Changed
4+
5+
### Fixed
6+
- PYSEC-2023-135 - upgrade Python module certifi to 2023.7.22
7+
- CVE-2019-8457 - upgrade base image to python:3.11.5-slim-bookworm
8+
9+
## [1.1.1] - 2023-06-03
10+
### Changed
11+
- Upgrade pythpn version to 3.11.3
12+
13+
### Fixed
14+
- Link for application
15+
- Misspellings
16+
17+
## [1.1.0] - 2023-06-01
18+
### Changed
19+
- Adding document on LOG_LEVEL and fault to error
20+
- Adding return parameters
21+
- Remove env_vars_to_export, file created for testing
22+
- Enumerate sync status
23+
- simplify query
24+
- updating version to reduce vulnerabilities
25+
- updating base image
26+
- increasing requests version to 2.31.0 to solve CVSS 6.1
27+
### Fixed
28+
29+
30+
## [1.0.1] - 2023-05-31
31+
- Original version
32+
- Adding debug ifo

incubating/argocd-app-status/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
FROM python:3.11.3-slim-buster
1+
FROM python:3.11.5-slim-bookworm
22
WORKDIR /app
33
COPY requirements.txt requirements.txt
44
RUN pip3 install -r requirements.txt

incubating/argocd-app-status/requirements.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
backoff==2.2.1
2-
certifi==2023.5.7
2+
certifi==2023.7.22
33
charset-normalizer==3.1.0
44
docopt==0.6.2
55
gql==3.4.0

incubating/argocd-app-status/step.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
kind: step-type
22
metadata:
33
name: argocd-app-status
4-
version: 1.1.1
4+
version: 1.1.2
55
isPublic: true
66
description: Get Argo CD App status and return its sybc and health status
77
sources:
@@ -61,7 +61,7 @@ spec:
6161
},
6262
"IMAGE_TAG": {
6363
"type": "string",
64-
"default": "1.1.1",
64+
"default": "1.1.2",
6565
"description": "OPTIONAL - To overwrite the tag to use"
6666
}
6767
}

0 commit comments

Comments
 (0)