Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Automated dependency bumping #274

Closed
wants to merge 1 commit into from
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions Dockerfile
Original file line number Diff line number Diff line change
@@ -1,15 +1,15 @@
FROM google/cloud-sdk:450.0.0-alpine@sha256:cbd5227a6b73345f72f7bb6ee04be147f443080dc0cc43052aef63642d5ff47c AS base
FROM google/cloud-sdk:450.0.0-alpine@sha256:9784682664db1be5b6aef410ff5786389bc0660f4987c21b688b2ca84456acab AS base

Check notice

Code scanning / Trivy

No HEALTHCHECK defined Low

Artifact: Dockerfile
Type: dockerfile
Vulnerability DS026
Severity: LOW
Message: Add HEALTHCHECK instruction in your Dockerfile
Link: DS026
ARG KUSTOMIZE_VERSION=5.1.1
ARG SOPS_VERSION=3.8.0
ARG HELM_VERSION=3.13.0
ARG SOPS_VERSION=3.8.1
ARG HELM_VERSION=3.13.1
ADD https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2Fv${KUSTOMIZE_VERSION}/kustomize_v${KUSTOMIZE_VERSION}_linux_amd64.tar.gz /tmp
ADD https://get.helm.sh/helm-v${HELM_VERSION}-linux-amd64.tar.gz /tmp
RUN tar xf /tmp/kustomize_v${KUSTOMIZE_VERSION}_linux_amd64.tar.gz -C /usr/bin && \
tar xf /tmp/helm-v${HELM_VERSION}-linux-amd64.tar.gz -C /usr/bin && \
wget https://github.com/getsops/sops/releases/download/v${SOPS_VERSION}/sops-v${SOPS_VERSION}.linux.amd64 -O /usr/bin/sops && \
chmod a+x /usr/bin/sops

FROM google/cloud-sdk:450.0.0-alpine@sha256:cbd5227a6b73345f72f7bb6ee04be147f443080dc0cc43052aef63642d5ff47c
FROM google/cloud-sdk:450.0.0-alpine@sha256:9784682664db1be5b6aef410ff5786389bc0660f4987c21b688b2ca84456acab
COPY --from=base /usr/bin/kustomize /usr/bin/kustomize
COPY --from=base /usr/bin/linux-amd64/helm /usr/bin/helm
COPY --from=base /usr/bin/sops /usr/bin/sops
Expand Down
10 changes: 5 additions & 5 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,8 @@ You can manually build the Docker image with the following command:
```bash
docker buildx build . -t muehlemannpopp/gke-deploy-tools:latest \
--build-arg KUSTOMIZE_VERSION=5.1.1 \
--build-arg SOPS_VERSION=3.8.0 \
--build-arg HELM_VERSION=3.13.0
--build-arg SOPS_VERSION=3.8.1 \
--build-arg HELM_VERSION=3.13.1
```

# Push image
Expand All @@ -23,10 +23,10 @@ docker push muehlemannpopp/gke-deploy-tools:latest

| dependency | version | last updated | digest |
|------------ |-------------- |-------------------------- |----------------------------------------------------------------------- |
| google-cloud | 450.0.0-alpine | 2023-10-10T15:28:22.309773Z | sha256:cbd5227a6b73345f72f7bb6ee04be147f443080dc0cc43052aef63642d5ff47c |
| google-cloud | 450.0.0-alpine | 2023-10-14T10:54:54.816714Z | sha256:9784682664db1be5b6aef410ff5786389bc0660f4987c21b688b2ca84456acab |
| kustomize | 5.1.1 | 2023-07-31T17:20:01Z | |
| sops | 3.8.0 | 2023-09-15T13:52:37Z | |
| Helm | 3.13.0 | 2023-09-27T20:51:15Z | |
| sops | 3.8.1 | 2023-10-11T15:25:32Z | |
| Helm | 3.13.1 | 2023-10-12T14:10:22Z | |


## Google Cloud SDK
Expand Down