From b3f776ec58660ff74c64d373192cfe487f563e0f Mon Sep 17 00:00:00 2001 From: Andrea Adams Date: Wed, 13 Jun 2018 10:30:34 -0600 Subject: [PATCH 1/2] Update monasca-watcher golang library The golang library 1.10.3 is protected against the zip slip vulnerability. Signed-off-by: Andrea Adams --- influxdb-watcher/Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/influxdb-watcher/Dockerfile b/influxdb-watcher/Dockerfile index 1221b7d97..1f43330b1 100644 --- a/influxdb-watcher/Dockerfile +++ b/influxdb-watcher/Dockerfile @@ -1,4 +1,4 @@ -FROM alpine:3.7 as influxdb-watcher-builder +FROM golang:1.10.3-alpine3.7 as influxdb-watcher-builder # To force a rebuild, pass --build-arg REBUILD="$(DATE)" when running # `docker build` @@ -10,7 +10,7 @@ ARG WATCHER_BRANCH=master ENV GOPATH=/go ENV PROJECT_DIR=$GOPATH/src/github.com/monasca/monasca-watchers -RUN apk add --no-cache openssl-dev git go glide g++ +RUN apk add --no-cache openssl-dev git glide g++ WORKDIR $PROJECT_DIR RUN git init && \ From c7cf5f9f84bcc23365e75ba0ce1b648dc6fb7287 Mon Sep 17 00:00:00 2001 From: Andrea Adams Date: Thu, 14 Jun 2018 10:56:08 -0600 Subject: [PATCH 2/2] Bump build.yaml --- influxdb-watcher/build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/influxdb-watcher/build.yml b/influxdb-watcher/build.yml index 0ab762dbe..0d9a54997 100644 --- a/influxdb-watcher/build.yml +++ b/influxdb-watcher/build.yml @@ -2,4 +2,4 @@ repository: monasca/influxdb-watcher variants: - tag: 'latest' aliases: - - :0.0.2 + - :0.0.3