Skip to content

Conversation

swiatekm
Copy link

@swiatekm swiatekm commented Jan 11, 2022

Terraform to 1.1.3
Alpine to 3.15
Collection to 2.3.2

This should take care of some vulnerabilities reported for our out-of-support TF version.

@swiatekm swiatekm requested a review from a team as a code owner January 11, 2022 09:39
Copy link
Contributor

@pmalek-sumo pmalek-sumo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

While this help with some vulnerabilities (mostly due to the upgraded terraform version) we'll also need to bump the providers (which are defined in the downloaded main.tf) in order to get all of them sorted out.

You can get some of these problems by looking at the output of docker scan (or a similar tool).

@swiatekm
Copy link
Author

While this help with some vulnerabilities (mostly due to the upgraded terraform version) we'll also need to bump the providers (which are defined in the downloaded main.tf) in order to get all of them sorted out.

You can get some of these problems by looking at the output of docker scan (or a similar tool).

Actually, running docker scan on the image built from this revision doesn't find any vulnerabilities. In fact, it doesn't look like Snyk cares about Terraform at all.

@swiatekm swiatekm merged commit 4c67df6 into main Jan 11, 2022
@swiatekm swiatekm deleted the chore/dependency-updates branch January 11, 2022 11:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants