Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

🚑 Add limit-severities-for-sarif option to aquasecurity/trivy-action #2254

Merged
merged 1 commit into from
Nov 7, 2023

Conversation

jacobwoffenden
Copy link
Member

Correctly pass severity when using SARIF format

Resolves #2251

Signed-off-by: Jacob Woffenden [email protected]

@jacobwoffenden jacobwoffenden self-assigned this Nov 7, 2023
@jacobwoffenden jacobwoffenden requested a review from a team November 7, 2023 17:00
@github-actions github-actions bot added the github-workflow Pull requests that update workflows label Nov 7, 2023
@jacobwoffenden jacobwoffenden merged commit 651b572 into main Nov 7, 2023
8 checks passed
@jacobwoffenden jacobwoffenden deleted the hotfix/trivy-image-sarif-sev branch November 7, 2023 17:20
mitchdawson1982 pushed a commit that referenced this pull request Nov 8, 2023
mitchdawson1982 added a commit that referenced this pull request Nov 8, 2023
* 🚧 Delete table metadata versioning

* 🚚 Move delete glue table funcion to its own base module

* ✅ Refactor delete table tests

* 🔥 Refactor and remove code to VersionCreator class

* ✨ Now handles removing tables, data files, versioning and copying

* ✨ Added new and refactored utility functions

* 🔥 Remove unused fixture

* ♻️ Simplify update_metadata_remove_schemas

* 👔 Validate on schema list rather than presence of schema key

* ✅ Add test to validate deletion of schema.json file

* 🔊 Update success message

* 🔥 Remove create table function as not needed at this time

* ✅ Updated spec folder version

* 📝 Update python base change log and config with new version

* 🧪 Fix python base tests to use s3_client

* ✅ Add tests for VersionCreator.update_metadata_remove_schema method

* 📝 Update change logs and bump delete table version

* ➕ Add pyparsing===3.1.1

* Update delete_table.py update success response with format_response_json

* ✅ Update test to reflect success response object change

* 🚑 Update repository name

* 🔖 Update changelog and increase version

* 📝 Update change logs and bump delete table version

* ♻️ Move delete_all_element_version_data_files to versioning module

* terraform(deps): bump terraform-aws-modules/iam/aws from 5.30.0 to 5.30.1 in /terraform/aws/analytical-platform-data-production/airflow (#2222)

terraform(deps): bump terraform-aws-modules/iam/aws

Bumps [terraform-aws-modules/iam/aws](https://github.com/terraform-aws-modules/terraform-aws-iam) from 5.30.0 to 5.30.1.
- [Release notes](https://github.com/terraform-aws-modules/terraform-aws-iam/releases)
- [Changelog](https://github.com/terraform-aws-modules/terraform-aws-iam/blob/master/CHANGELOG.md)
- [Commits](terraform-aws-modules/terraform-aws-iam@v5.30.0...v5.30.1)

---
updated-dependencies:
- dependency-name: terraform-aws-modules/iam/aws
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* terraform(deps): bump terraform-aws-modules/iam/aws

Bumps [terraform-aws-modules/iam/aws](https://github.com/terraform-aws-modules/terraform-aws-iam) from 5.30.0 to 5.30.1.
- [Release notes](https://github.com/terraform-aws-modules/terraform-aws-iam/releases)
- [Changelog](https://github.com/terraform-aws-modules/terraform-aws-iam/blob/master/CHANGELOG.md)
- [Commits](terraform-aws-modules/terraform-aws-iam@v5.30.0...v5.30.1)

---
updated-dependencies:
- dependency-name: terraform-aws-modules/iam/aws
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* terraform(deps): bump terraform-aws-modules/eks/aws

Bumps [terraform-aws-modules/eks/aws](https://github.com/terraform-aws-modules/terraform-aws-eks) from 19.18.0 to 19.19.0.
- [Release notes](https://github.com/terraform-aws-modules/terraform-aws-eks/releases)
- [Changelog](https://github.com/terraform-aws-modules/terraform-aws-eks/blob/master/CHANGELOG.md)
- [Commits](terraform-aws-modules/terraform-aws-eks@v19.18.0...v19.19.0)

---
updated-dependencies:
- dependency-name: terraform-aws-modules/eks/aws
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* github-actions(deps): bump actions/dependency-review-action

Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@6c5ccda...9f45b24)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* github-actions(deps): bump bridgecrewio/checkov-action

Bumps [bridgecrewio/checkov-action](https://github.com/bridgecrewio/checkov-action) from 12.2559.0 to 12.2562.0.
- [Release notes](https://github.com/bridgecrewio/checkov-action/releases)
- [Commits](bridgecrewio/checkov-action@7930f52...2187810)

---
updated-dependencies:
- dependency-name: bridgecrewio/checkov-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* Updated docs (#2241)

* Updated docs

* Added 400 response

* ♻️ Refactor GitHub Terraform component (#1985)

Signed-off-by: Jacob Woffenden <[email protected]>

* terraform(deps): bump hashicorp/aws

Bumps [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws) from 5.23.1 to 5.24.0.
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-aws@v5.23.1...v5.24.0)

---
updated-dependencies:
- dependency-name: hashicorp/aws
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* terraform(deps): bump hashicorp/aws

Bumps [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws) from 5.23.0 to 5.24.0.
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-aws@v5.23.0...v5.24.0)

---
updated-dependencies:
- dependency-name: hashicorp/aws
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* terraform(deps): bump hashicorp/aws

Bumps [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws) from 5.21.0 to 5.24.0.
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-aws@v5.21.0...v5.24.0)

---
updated-dependencies:
- dependency-name: hashicorp/aws
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* ✨ Ways of Working 2.0 (#2153)

Signed-off-by: Jacob Woffenden <[email protected]>
Co-authored-by: Jake H-P <[email protected]>
Co-authored-by: Jacob Hamblin-Pyke <[email protected]>
Co-authored-by: Michael Collins <[email protected]>

* github-actions(deps): bump aquasecurity/trivy-action

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.13.1 to 0.14.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@f78e9ec...2b6a709)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* github-actions(deps): bump bridgecrewio/checkov-action

Bumps [bridgecrewio/checkov-action](https://github.com/bridgecrewio/checkov-action) from 12.2562.0 to 12.2564.0.
- [Release notes](https://github.com/bridgecrewio/checkov-action/releases)
- [Commits](bridgecrewio/checkov-action@2187810...b74b473)

---
updated-dependencies:
- dependency-name: bridgecrewio/checkov-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* terraform(deps): bump integrations/github in /terraform/github

Bumps [integrations/github](https://github.com/integrations/terraform-provider-github) from 5.41.0 to 5.42.0.
- [Release notes](https://github.com/integrations/terraform-provider-github/releases)
- [Changelog](https://github.com/integrations/terraform-provider-github/blob/main/CHANGELOG.md)
- [Commits](integrations/terraform-provider-github@v5.41.0...v5.42.0)

---
updated-dependencies:
- dependency-name: integrations/github
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* terraform(deps): bump terraform-aws-modules/iam/aws

Bumps [terraform-aws-modules/iam/aws](https://github.com/terraform-aws-modules/terraform-aws-iam) from 5.30.0 to 5.30.1.
- [Release notes](https://github.com/terraform-aws-modules/terraform-aws-iam/releases)
- [Changelog](https://github.com/terraform-aws-modules/terraform-aws-iam/blob/master/CHANGELOG.md)
- [Commits](terraform-aws-modules/terraform-aws-iam@v5.30.0...v5.30.1)

---
updated-dependencies:
- dependency-name: terraform-aws-modules/iam/aws
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* Update Data Product tech docs (#2177)

* add versioning documentation
* update spec and governance docs with optional implemented fields
* add erb headers for previously added doc pages
* Update docs/source/documentation/data-products/components/product-specification.html.md.erb
* clarify `email` contact info definition

* Swagger docs update (#2250)

* 📝 Update delete table swagger documentation

* 📝 Update docs for presigned url and delete table

* terraform(deps): bump terraform-aws-modules/iam/aws from 5.30.0 to 5.30.1 in /terraform/aws/analytical-platform-data-production/airflow (#2222)

terraform(deps): bump terraform-aws-modules/iam/aws

Bumps [terraform-aws-modules/iam/aws](https://github.com/terraform-aws-modules/terraform-aws-iam) from 5.30.0 to 5.30.1.
- [Release notes](https://github.com/terraform-aws-modules/terraform-aws-iam/releases)
- [Changelog](https://github.com/terraform-aws-modules/terraform-aws-iam/blob/master/CHANGELOG.md)
- [Commits](terraform-aws-modules/terraform-aws-iam@v5.30.0...v5.30.1)

---
updated-dependencies:
- dependency-name: terraform-aws-modules/iam/aws
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* terraform(deps): bump terraform-aws-modules/iam/aws

Bumps [terraform-aws-modules/iam/aws](https://github.com/terraform-aws-modules/terraform-aws-iam) from 5.30.0 to 5.30.1.
- [Release notes](https://github.com/terraform-aws-modules/terraform-aws-iam/releases)
- [Changelog](https://github.com/terraform-aws-modules/terraform-aws-iam/blob/master/CHANGELOG.md)
- [Commits](terraform-aws-modules/terraform-aws-iam@v5.30.0...v5.30.1)

---
updated-dependencies:
- dependency-name: terraform-aws-modules/iam/aws
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* terraform(deps): bump terraform-aws-modules/eks/aws

Bumps [terraform-aws-modules/eks/aws](https://github.com/terraform-aws-modules/terraform-aws-eks) from 19.18.0 to 19.19.0.
- [Release notes](https://github.com/terraform-aws-modules/terraform-aws-eks/releases)
- [Changelog](https://github.com/terraform-aws-modules/terraform-aws-eks/blob/master/CHANGELOG.md)
- [Commits](terraform-aws-modules/terraform-aws-eks@v19.18.0...v19.19.0)

---
updated-dependencies:
- dependency-name: terraform-aws-modules/eks/aws
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* github-actions(deps): bump actions/dependency-review-action

Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@6c5ccda...9f45b24)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* github-actions(deps): bump bridgecrewio/checkov-action

Bumps [bridgecrewio/checkov-action](https://github.com/bridgecrewio/checkov-action) from 12.2559.0 to 12.2562.0.
- [Release notes](https://github.com/bridgecrewio/checkov-action/releases)
- [Commits](bridgecrewio/checkov-action@7930f52...2187810)

---
updated-dependencies:
- dependency-name: bridgecrewio/checkov-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* Updated docs (#2241)

* Updated docs

* Added 400 response

* ♻️ Refactor GitHub Terraform component (#1985)

Signed-off-by: Jacob Woffenden <[email protected]>

* terraform(deps): bump hashicorp/aws

Bumps [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws) from 5.23.1 to 5.24.0.
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-aws@v5.23.1...v5.24.0)

---
updated-dependencies:
- dependency-name: hashicorp/aws
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* terraform(deps): bump hashicorp/aws

Bumps [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws) from 5.23.0 to 5.24.0.
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-aws@v5.23.0...v5.24.0)

---
updated-dependencies:
- dependency-name: hashicorp/aws
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* terraform(deps): bump hashicorp/aws

Bumps [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws) from 5.21.0 to 5.24.0.
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-aws@v5.21.0...v5.24.0)

---
updated-dependencies:
- dependency-name: hashicorp/aws
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* ✨ Ways of Working 2.0 (#2153)

Signed-off-by: Jacob Woffenden <[email protected]>
Co-authored-by: Jake H-P <[email protected]>
Co-authored-by: Jacob Hamblin-Pyke <[email protected]>
Co-authored-by: Michael Collins <[email protected]>

* github-actions(deps): bump aquasecurity/trivy-action

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.13.1 to 0.14.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@f78e9ec...2b6a709)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* github-actions(deps): bump bridgecrewio/checkov-action

Bumps [bridgecrewio/checkov-action](https://github.com/bridgecrewio/checkov-action) from 12.2562.0 to 12.2564.0.
- [Release notes](https://github.com/bridgecrewio/checkov-action/releases)
- [Commits](bridgecrewio/checkov-action@2187810...b74b473)

---
updated-dependencies:
- dependency-name: bridgecrewio/checkov-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* terraform(deps): bump integrations/github in /terraform/github

Bumps [integrations/github](https://github.com/integrations/terraform-provider-github) from 5.41.0 to 5.42.0.
- [Release notes](https://github.com/integrations/terraform-provider-github/releases)
- [Changelog](https://github.com/integrations/terraform-provider-github/blob/main/CHANGELOG.md)
- [Commits](integrations/terraform-provider-github@v5.41.0...v5.42.0)

---
updated-dependencies:
- dependency-name: integrations/github
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* terraform(deps): bump terraform-aws-modules/iam/aws

Bumps [terraform-aws-modules/iam/aws](https://github.com/terraform-aws-modules/terraform-aws-iam) from 5.30.0 to 5.30.1.
- [Release notes](https://github.com/terraform-aws-modules/terraform-aws-iam/releases)
- [Changelog](https://github.com/terraform-aws-modules/terraform-aws-iam/blob/master/CHANGELOG.md)
- [Commits](terraform-aws-modules/terraform-aws-iam@v5.30.0...v5.30.1)

---
updated-dependencies:
- dependency-name: terraform-aws-modules/iam/aws
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* Update Data Product tech docs (#2177)

* add versioning documentation
* update spec and governance docs with optional implemented fields
* add erb headers for previously added doc pages
* Update docs/source/documentation/data-products/components/product-specification.html.md.erb
* clarify `email` contact info definition

* 📝 Update changelog & version

---------

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Jacob Woffenden <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: PriyaBasker23 <[email protected]>
Co-authored-by: Jacob Woffenden <[email protected]>
Co-authored-by: Jake H-P <[email protected]>
Co-authored-by: Jacob Hamblin-Pyke <[email protected]>
Co-authored-by: Michael Collins <[email protected]>
Co-authored-by: Tom Webber <[email protected]>

* Dp 1797 update athena_load to use existing schema for curated table (#2156)

* Use existing schema for curated table if exists
* test load handler with and without existing schema
* refactor athena_load_handler tests
* database name for DataProductElement.curated_data_table includes latest major version
* trim schema table desc and col comment to glue limits
* clear defaults from glue schema template
* add `database_name` to `BaseJsonSchema` - used in glue schema
* add `database_name` to `DataProductElement` - used in `curated_data_table`

* Check csv for issues even if schema is not available (#2205)

* Check csv for issues even if schema is not available

If the schema is available, we can validate column types.
However, even if we don't have a schema, we need to check that
the csv looks parsable and does not contain embedded newlines.

* Changelog and versioning

* Use the correct name for logging to s3

* Add data product name to the logger and update to latest base image in reload/resync lambdas (#2211)

* Add data product name to the logger where missing

* Upgrade to latest base image

This picks up the new path format changes.

* 🚑 Add `limit-severities-for-sarif` option to `aquasecurity/trivy-action` (#2254)

Signed-off-by: Jacob Woffenden <[email protected]>

* Remove delete table schema references (#2257)

* 🔥 Remove delete table schema references

* 📝 Update changelog and config.json for v1.0.11

* fix container dockerfiles: `LAMDA_TASK_ROOT` -> `LAMBDA_TASK_ROOT` (#2253)

* fix container dockerfiles: `LAMDA_TASK_ROOT` -> `LAMBDA_TASK_ROOT`
* update `evaluate_checks` workflow error reporting

* Return text/plain preview instead of application/json (#2260)

Currently, API gateway is returning the response as a JSON encoded
string, e.g.

`"| col_0              | col_1               | col_2               | col_3               | extraction_timestamp |\n| 0.1915194503788923 | 0.3648859839013723  | 0.0598092227798519  | 0.2852509600245098  | 20231023T144052Z     |\n| 0.7853585837137692 | 0.3688240060019745  | 0.6748809435823302  | 0.19567517866589823 | 20231023T144052Z     |\n| 0.7799758081188035 | 0.9331401019825216  | 0.5946247799344488  | 0.38231745203150647 | 20231023T144052Z     |\n| 0.2725926052826416 | 0.6513781432265774  | 0.5333101629987506  | 0.05387368514623658 | 20231023T144052Z     |\n| 0.2764642551430967 | 0.3972025777261542  | 0.04332406269480349 | 0.45164840826085906 | 20231023T144052Z     |\n| 0.6221087710398319 | 0.6153961784334937  | 0.18428708381381365 | 0.624916705305911   | 20231023T144052Z     |\n| 0.4377277390071145 | 0.07538124164297655 | 0.04735527880151513 | 0.47809379567067456 | 20231023T144052Z     |\n| 0.8018721775350193 | 0.7887301429407455  | 0.5614330800633979  | 0.9820047415219545  | 20231023T144052Z     |\n| 0.9581393536837052 | 0.31683612216887125 | 0.329668445620915   | 0.12394270048696299 | 20231023T144052Z     |\n| 0.8759326347420947 | 0.5680986526260692  | 0.5029668331126184  | 0.1193808979262484  | 20231023T144052Z     |\n"`

(Note the enclosing quote characters and literal \n instead of line breaks).

We actually want this to be plain text, formatted so that it displays
nicely on a console.

* ✨ Add `ONBUILD` to DaaP Python Base (#2256)

Signed-off-by: Jacob Woffenden <[email protected]>

* fix and update get_schema lambda (#2261)

* fix get schema
* use DataProductSchema to fetch schema

* github-actions(deps): bump bridgecrewio/checkov-action

Bumps [bridgecrewio/checkov-action](https://github.com/bridgecrewio/checkov-action) from 12.2564.0 to 12.2566.0.
- [Release notes](https://github.com/bridgecrewio/checkov-action/releases)
- [Commits](bridgecrewio/checkov-action@b74b473...61c04ed)

---
updated-dependencies:
- dependency-name: bridgecrewio/checkov-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* github-actions(deps): bump actions/dependency-review-action

Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 3.1.1 to 3.1.2.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@9f45b24...fde92ac)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* 🛂 Adds `ap-rshiny-notesbook` to ECR trust (#2265)

Signed-off-by: Jacob Woffenden <[email protected]>

* 📝 Update python base change log and config with new version

* 📝 Update change logs and bump delete table version

* 📝 Update change logs and bump delete table version

* 📌 Update python base image version

---------

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Jacob Woffenden <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: PriyaBasker23 <[email protected]>
Co-authored-by: Jacob Woffenden <[email protected]>
Co-authored-by: Jake H-P <[email protected]>
Co-authored-by: Jacob Hamblin-Pyke <[email protected]>
Co-authored-by: Michael Collins <[email protected]>
Co-authored-by: Tom Webber <[email protected]>
Co-authored-by: Mat <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
github-workflow Pull requests that update workflows
Projects
None yet
Development

Successfully merging this pull request may close these issues.

🐛 Trivy scan fails when no critical vulnerabilities are detected
2 participants