Merge pull request #227 from MaibornWolff/chore/pin_docker_image

chore: pin version of docker image
MaibornWolff · Nov 22, 2024 · 5476f0d · 5476f0d
2 parents d15c240 + e97c342
commit 5476f0d
Show file tree

Hide file tree

Showing 41 changed files with 41 additions and 41 deletions.
diff --git a/actions/DAST/cryptolyzer/action.yaml b/actions/DAST/cryptolyzer/action.yaml
@@ -42,7 +42,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners:latest'
+  image: 'docker://maibornwolff/secobserve-scanners:2024_11_3'
   entrypoint: '/entrypoints/entrypoint_cryptolyzer.sh'
   env:
     TARGET: ${{ inputs.target }}

diff --git a/actions/DAST/drheader/action.yaml b/actions/DAST/drheader/action.yaml
@@ -45,7 +45,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners:latest'
+  image: 'docker://maibornwolff/secobserve-scanners:2024_11_3'
   entrypoint: '/entrypoints/entrypoint_drheader.sh'
   env:
     TARGET: ${{ inputs.target }}

diff --git a/actions/DAST/zap/action.yaml b/actions/DAST/zap/action.yaml
@@ -46,7 +46,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners-zap:latest'
+  image: 'docker://maibornwolff/secobserve-scanners-zap:2024_11_3'
   entrypoint: '/entrypoints/entrypoint_zap.sh'
   env:
     TARGET: ${{ inputs.target }}

diff --git a/actions/SAST/bandit/action.yaml b/actions/SAST/bandit/action.yaml
@@ -46,7 +46,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners:latest'
+  image: 'docker://maibornwolff/secobserve-scanners:2024_11_3'
   entrypoint: '/entrypoints/entrypoint_bandit.sh'
   env:
     TARGET: ${{ inputs.target }}

diff --git a/actions/SAST/checkov/action.yaml b/actions/SAST/checkov/action.yaml
@@ -46,7 +46,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners:latest'
+  image: 'docker://maibornwolff/secobserve-scanners:2024_11_3'
   entrypoint: '/entrypoints/entrypoint_checkov.sh'
   env:
     TARGET: ${{ inputs.target }}

diff --git a/actions/SAST/eslint/action.yaml b/actions/SAST/eslint/action.yaml
@@ -46,7 +46,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners:latest'
+  image: 'docker://maibornwolff/secobserve-scanners:2024_11_3'
   entrypoint: '/entrypoints/entrypoint_eslint.sh'
   env:
     TARGET: ${{ inputs.target }}

diff --git a/actions/SAST/kics/action.yaml b/actions/SAST/kics/action.yaml
@@ -50,7 +50,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners:latest'
+  image: 'docker://maibornwolff/secobserve-scanners:2024_11_3'
   entrypoint: '/entrypoints/entrypoint_kics.sh'
   env:
     TARGET: ${{ inputs.target }}

diff --git a/actions/SAST/semgrep/action.yaml b/actions/SAST/semgrep/action.yaml
@@ -50,7 +50,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners:latest'
+  image: 'docker://maibornwolff/secobserve-scanners:2024_11_3'
   entrypoint: '/entrypoints/entrypoint_semgrep.sh'
   env:
     TARGET: ${{ inputs.target }}

diff --git a/actions/SAST/tfsec/action.yaml b/actions/SAST/tfsec/action.yaml
@@ -46,7 +46,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners:latest'
+  image: 'docker://maibornwolff/secobserve-scanners:2024_11_3'
   entrypoint: '/entrypoints/entrypoint_tfsec.sh'
   env:
     TARGET: ${{ inputs.target }}

diff --git a/actions/SAST/trivy_config/action.yaml b/actions/SAST/trivy_config/action.yaml
@@ -46,7 +46,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners:latest'
+  image: 'docker://maibornwolff/secobserve-scanners:2024_11_3'
   entrypoint: '/entrypoints/entrypoint_trivy_config.sh'
   env:
     TARGET: ${{ inputs.target }}

diff --git a/actions/SCA/grype_image/action.yaml b/actions/SCA/grype_image/action.yaml
@@ -45,7 +45,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners:latest'
+  image: 'docker://maibornwolff/secobserve-scanners:2024_11_3'
   entrypoint: '/entrypoints/entrypoint_grype_image.sh'
   env:
     TARGET: ${{ inputs.target }}

diff --git a/actions/SCA/grype_sbom/action.yaml b/actions/SCA/grype_sbom/action.yaml
@@ -45,7 +45,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners:latest'
+  image: 'docker://maibornwolff/secobserve-scanners:2024_11_3'
   entrypoint: '/entrypoints/entrypoint_grype_sbom.sh'
   env:
     TARGET: ${{ inputs.target }}

diff --git a/actions/SCA/trivy_filesystem/action.yaml b/actions/SCA/trivy_filesystem/action.yaml
@@ -50,7 +50,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners:latest'
+  image: 'docker://maibornwolff/secobserve-scanners:2024_11_3'
   entrypoint: '/entrypoints/entrypoint_trivy_filesystem.sh'
   env:
     TARGET: ${{ inputs.target }}

diff --git a/actions/SCA/trivy_image/action.yaml b/actions/SCA/trivy_image/action.yaml
@@ -46,7 +46,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners:latest'
+  image: 'docker://maibornwolff/secobserve-scanners:2024_11_3'
   entrypoint: '/entrypoints/entrypoint_trivy_image.sh'
   env:
     TARGET: ${{ inputs.target }}

diff --git a/actions/check_security_gate/action.yaml b/actions/check_security_gate/action.yaml
@@ -15,7 +15,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners:latest'
+  image: 'docker://maibornwolff/secobserve-scanners:2024_11_3'
   entrypoint: 'check_security_gate.sh'
   env:
     SO_API_BASE_URL: ${{ inputs.so_api_base_url }}

diff --git a/actions/importer/action.yaml b/actions/importer/action.yaml
@@ -41,7 +41,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners:latest'
+  image: 'docker://maibornwolff/secobserve-scanners:2024_11_3'
   entrypoint: 'file_upload_observations.sh'
   env:
     SO_UPLOAD: ${{ inputs.so_upload }}

diff --git a/actions/secrets/gitleaks/action.yaml b/actions/secrets/gitleaks/action.yaml
@@ -42,7 +42,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners:latest'
+  image: 'docker://maibornwolff/secobserve-scanners:2024_11_3'
   entrypoint: '/entrypoints/entrypoint_gitleaks.sh'
   env:
     REPORT_NAME: ${{ inputs.report_name }}

diff --git a/actions/secrets/trivy_filesystem_secrets/action.yaml b/actions/secrets/trivy_filesystem_secrets/action.yaml
@@ -46,7 +46,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners:latest'
+  image: 'docker://maibornwolff/secobserve-scanners:2024_11_3'
   entrypoint: '/entrypoints/entrypoint_trivy_filesystem_secrets.sh'
   env:
     TARGET: ${{ inputs.target }}

diff --git a/actions/secrets/trivy_image_secrets/action.yaml b/actions/secrets/trivy_image_secrets/action.yaml
@@ -42,7 +42,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners:latest'
+  image: 'docker://maibornwolff/secobserve-scanners:2024_11_3'
   entrypoint: '/entrypoints/entrypoint_trivy_image_secrets.sh'
   env:
     TARGET: ${{ inputs.target }}

diff --git a/actions/vulnerability_scanner/action.yaml b/actions/vulnerability_scanner/action.yaml
@@ -12,7 +12,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners:latest'
+  image: 'docker://maibornwolff/secobserve-scanners:2024_11_3'
   entrypoint: '/entrypoints/entrypoint_vulnerability_scanner.sh'
   env:
     SO_CONFIGURATION: ${{ inputs.so_configuration }}

diff --git a/dev/actions/DAST/zap/action.yaml b/dev/actions/DAST/zap/action.yaml
@@ -46,7 +46,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://maibornwolff/secobserve-scanners-zap:latest'
+  image: 'docker://maibornwolff/secobserve-scanners-zap:dev'
   entrypoint: '/entrypoints/entrypoint_zap.sh'
   env:
     TARGET: ${{ inputs.target }}

diff --git a/templates/DAST/cryptolyzer.yml b/templates/DAST/cryptolyzer.yml
@@ -1,6 +1,6 @@
 .cryptolyzer:
   image:
-    name: maibornwolff/secobserve-scanners:latest
+    name: maibornwolff/secobserve-scanners:2024_11_3
   stage: post_deploy
   variables:
     GIT_STRATEGY: none

diff --git a/templates/DAST/drheader.yml b/templates/DAST/drheader.yml
@@ -1,6 +1,6 @@
 .drheader:
   image:
-    name: maibornwolff/secobserve-scanners:latest
+    name: maibornwolff/secobserve-scanners:2024_11_3
   stage: post_deploy
   variables:
     GIT_STRATEGY: none

diff --git a/templates/DAST/zap.yml b/templates/DAST/zap.yml
@@ -1,6 +1,6 @@
 .zap:
   image:
-    name: maibornwolff/secobserve-scanners-zap:latest
+    name: maibornwolff/secobserve-scanners-zap:2024_11_3
   stage: post_deploy
   variables:
     GIT_STRATEGY: none

diff --git a/templates/SAST/bandit.yml b/templates/SAST/bandit.yml
@@ -1,6 +1,6 @@
 .bandit:
   image:
-    name: maibornwolff/secobserve-scanners:latest
+    name: maibornwolff/secobserve-scanners:2024_11_3
   stage: test
   variables:
     FURTHER_PARAMETERS: ""

diff --git a/templates/SAST/checkov.yml b/templates/SAST/checkov.yml
@@ -1,6 +1,6 @@
 .checkov:
   image:
-    name: maibornwolff/secobserve-scanners:latest
+    name: maibornwolff/secobserve-scanners:2024_11_3
   stage: test
   variables:
     FURTHER_PARAMETERS: ""

diff --git a/templates/SAST/eslint.yml b/templates/SAST/eslint.yml
@@ -1,6 +1,6 @@
 .eslint:
   image:
-    name: maibornwolff/secobserve-scanners:latest
+    name: maibornwolff/secobserve-scanners:2024_11_3
   stage: test
   variables:
     FURTHER_PARAMETERS: ""

diff --git a/templates/SAST/kics.yml b/templates/SAST/kics.yml
@@ -1,6 +1,6 @@
 .kics:
   image:
-    name: maibornwolff/secobserve-scanners:latest
+    name: maibornwolff/secobserve-scanners:2024_11_3
   stage: test
   variables:
     FURTHER_PARAMETERS: ""

diff --git a/templates/SAST/semgrep.yml b/templates/SAST/semgrep.yml
@@ -1,6 +1,6 @@
 .semgrep:
   image:
-    name: maibornwolff/secobserve-scanners:latest
+    name: maibornwolff/secobserve-scanners:2024_11_3
   stage: test
   variables:
     FURTHER_PARAMETERS: ""

diff --git a/templates/SAST/tfsec.yml b/templates/SAST/tfsec.yml
@@ -1,6 +1,6 @@
 .kics:
   image:
-    name: maibornwolff/secobserve-scanners:latest
+    name: maibornwolff/secobserve-scanners:2024_11_3
   stage: test
   variables:
     FURTHER_PARAMETERS: ""

diff --git a/templates/SAST/trivy_config.yml b/templates/SAST/trivy_config.yml
@@ -1,6 +1,6 @@
 .kics:
   image:
-    name: maibornwolff/secobserve-scanners:latest
+    name: maibornwolff/secobserve-scanners:2024_11_3
   stage: test
   variables:
     FURTHER_PARAMETERS: ""

diff --git a/templates/SCA/grype_image.yml b/templates/SCA/grype_image.yml
@@ -1,6 +1,6 @@
 .grype_image:
   image:
-    name: maibornwolff/secobserve-scanners:latest
+    name: maibornwolff/secobserve-scanners:2024_11_3
   stage: test
   variables:
     GIT_STRATEGY: none

diff --git a/templates/SCA/grype_sbom.yml b/templates/SCA/grype_sbom.yml
@@ -1,6 +1,6 @@
 .grype_image:
   image:
-    name: maibornwolff/secobserve-scanners:latest
+    name: maibornwolff/secobserve-scanners:2024_11_3
   stage: test
   variables:
     FURTHER_PARAMETERS: ""

diff --git a/templates/SCA/trivy_filesystem.yml b/templates/SCA/trivy_filesystem.yml
@@ -1,6 +1,6 @@
 .trivy_filesystem:
   image:
-    name: maibornwolff/secobserve-scanners:latest
+    name: maibornwolff/secobserve-scanners:2024_11_3
   stage: test
   variables:
     FURTHER_PARAMETERS: ""

diff --git a/templates/SCA/trivy_image.yml b/templates/SCA/trivy_image.yml
@@ -1,6 +1,6 @@
 .trivy_image:
   image:
-    name: maibornwolff/secobserve-scanners:latest
+    name: maibornwolff/secobserve-scanners:2024_11_3
   stage: test
   variables:
     GIT_STRATEGY: none

diff --git a/templates/check_security_gate.yml b/templates/check_security_gate.yml
@@ -1,6 +1,6 @@
 .check_security_gate:
   image:
-    name: maibornwolff/secobserve-scanners:latest
+    name: maibornwolff/secobserve-scanners:2024_11_3
   stage: post_test
   variables:
     GIT_STRATEGY: none

diff --git a/templates/importer.yml b/templates/importer.yml
@@ -1,6 +1,6 @@
 .importer:
   image:
-    name: maibornwolff/secobserve-scanners:latest
+    name: maibornwolff/secobserve-scanners:2024_11_3
   stage: upload
   variables:
     GIT_STRATEGY: none

diff --git a/templates/secrets/gitleaks.yml b/templates/secrets/gitleaks.yml
@@ -1,6 +1,6 @@
 .gitleaks:
   image:
-    name: maibornwolff/secobserve-scanners:latest
+    name: maibornwolff/secobserve-scanners:2024_11_3
   stage: test
   variables:
     FURTHER_PARAMETERS: ""

diff --git a/templates/secrets/trivy_filesystem_secrets.yml b/templates/secrets/trivy_filesystem_secrets.yml
@@ -1,6 +1,6 @@
 .trivy_filesystem_secrets:
   image:
-    name: maibornwolff/secobserve-scanners:latest
+    name: maibornwolff/secobserve-scanners:2024_11_3
   stage: test
   variables:
     FURTHER_PARAMETERS: ""

diff --git a/templates/secrets/trivy_image_secrets.yml b/templates/secrets/trivy_image_secrets.yml
@@ -1,6 +1,6 @@
 .trivy_image_secrets:
   image:
-    name: maibornwolff/secobserve-scanners:latest
+    name: maibornwolff/secobserve-scanners:2024_11_3
   stage: test
   variables:
     GIT_STRATEGY: none

diff --git a/templates/vulnerability_scanner.yml b/templates/vulnerability_scanner.yml
@@ -1,6 +1,6 @@
 .vulnerability_scanner:
   image:
-    name: maibornwolff/secobserve-scanners:latest
+    name: maibornwolff/secobserve-scanners:2024_11_3
   script:
     - scan_vulnerabilities.sh
   interruptible: true