Natsumi.pang/update verkada main

[natsumipang]

Merge main to Verkada-Main

[semgrep-code-verkada]

Semgrep identified a blocking 🔴 issue in your code:
This Dockerfile is not using an approved base image. See https://go/baseimageupgrades. If you need to add your image to approved base images, update the rule at https://github.com/verkada/securitybots/blob/main/semgrep/rules/verkada-dockerfile-use-approved-base-image.yaml and submit a PR. Also update notion page accordingly.

To resolve this comment:

✨ Commit Assistant Fix Suggestion

1. Replace the current FROM arigaio/atlas:latest-alpine@sha256:... line with an approved Verkada base image from the approved images list, such as 505834710180.dkr.ecr.us-west-2.amazonaws.com/verkada/alpine-base or another that meets your OS/runtime requirements.
2. Reinstall any required dependencies or tools in your Dockerfile that the previous base image provided but the approved Verkada image does not include by default. For example, you may need to manually install Atlas binaries and entrypoint scripts.
3. Review your Dockerfile and application to ensure all necessary migration and runtime functionality is still present with the approved base image.
   Alternatively, if you need to use a custom or third-party image, discuss with the security or infrastructure team about getting it reviewed and added to the list of approved base images.

Using only approved base images helps ensure images are regularly scanned, updated, and maintained for critical security patches.

💬 Ignore this finding

Reply with Semgrep commands to ignore this finding.

• /fp <comment> for false positive
• /ar <comment> for acceptable risk
• /other <comment> for all other reasons

Alternatively, triage in Semgrep AppSec Platform to ignore the finding created by verkada-dockerfile-use-approved-base-image.

_{You can view more details about this finding in the Semgrep AppSec Platform.}

[natsumipang]

/fp we are not using this dockerfile