From f65ad208c9fccfab82a1856cae2a57ff856a420b Mon Sep 17 00:00:00 2001 From: Jhovan Escobidal <105746199+JhovanEscobidal@users.noreply.github.com> Date: Thu, 19 May 2022 21:39:57 -0500 Subject: [PATCH 1/2] Create SECURITY.md --- SECURITY.md | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 000000000000..034e84803209 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,21 @@ +# Security Policy + +## Supported Versions + +Use this section to tell people about which versions of your project are +currently being supported with security updates. + +| Version | Supported | +| ------- | ------------------ | +| 5.1.x | :white_check_mark: | +| 5.0.x | :x: | +| 4.0.x | :white_check_mark: | +| < 4.0 | :x: | + +## Reporting a Vulnerability + +Use this section to tell people how to report a vulnerability. + +Tell them where to go, how often they can expect to get an update on a +reported vulnerability, what to expect if the vulnerability is accepted or +declined, etc. From 3d0a13953f57bd534377d7e117a9f32a37262cc0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 2 Mar 2023 01:57:16 +0000 Subject: [PATCH 2/2] Bump node from 14-alpine to 19-alpine Bumps node from 14-alpine to 19-alpine. --- updated-dependencies: - dependency-name: node dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- Dockerfile | 2 +- Dockerfile.openapi_decorator | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index c4b3447df0cd..21824c93b381 100644 --- a/Dockerfile +++ b/Dockerfile @@ -3,7 +3,7 @@ # -------------------------------------------------------------------------------- # BASE IMAGE # -------------------------------------------------------------------------------- -FROM node:16.13.2-alpine@sha256:f21f35732964a96306a84a8c4b5a829f6d3a0c5163237ff4b6b8b34f8d70064b as base +FROM node:16.13.2-alpine@sha256:155e324802ebfdd3f508340dcb0cd4a7510f8594802a2e53150f171ae8aa2462 as base # This directory is owned by the node user ARG APP_HOME=/home/node/app diff --git a/Dockerfile.openapi_decorator b/Dockerfile.openapi_decorator index 6014681b41da..790a00ddbbf4 100644 --- a/Dockerfile.openapi_decorator +++ b/Dockerfile.openapi_decorator @@ -1,4 +1,4 @@ -FROM node:14-alpine +FROM node:19-alpine RUN apk add --no-cache git python make g++