Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: add native image flavor #150

Merged
merged 2 commits into from
May 21, 2024
Merged

feat: add native image flavor #150

merged 2 commits into from
May 21, 2024

Conversation

chgl
Copy link
Contributor

@chgl chgl commented May 21, 2024

No description provided.

Copy link

Code Coverage Report

Overall Project 28.96%

There is no coverage information present for the Files changed

Copy link

github-actions bot commented May 21, 2024

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 4 0 0.05s
✅ DOCKERFILE hadolint 2 0 0.1s
✅ EDITORCONFIG editorconfig-checker 72 0 0.51s
✅ GROOVY npm-groovy-lint 2 0 9.47s
✅ JAVA checkstyle 18 0 4.92s
✅ JSON jsonlint 11 0 0.36s
✅ JSON prettier 11 0 3.34s
✅ JSON v8r 11 0 5.06s
✅ MARKDOWN markdownlint 2 0 0.79s
✅ PYTHON bandit 1 0 1.05s
✅ PYTHON black 1 0 1.03s
✅ PYTHON flake8 1 0 0.71s
✅ PYTHON isort 1 0 0.36s
✅ PYTHON mypy 1 0 8.01s
✅ PYTHON ruff 1 0 0.02s
✅ REPOSITORY checkov yes no 18.71s
✅ REPOSITORY gitleaks yes no 1.31s
✅ REPOSITORY git_diff yes no 0.03s
✅ REPOSITORY grype yes no 13.38s
✅ REPOSITORY kics yes no 5.15s
✅ REPOSITORY secretlint yes no 1.22s
✅ REPOSITORY syft yes no 2.63s
✅ REPOSITORY trivy yes no 8.95s
✅ REPOSITORY trivy-sbom yes no 5.96s
✅ REPOSITORY trufflehog yes no 4.1s
✅ SQL sql-lint 1 0 0.4s
✅ XML xmllint 1 0 0.01s
✅ YAML prettier 17 0 1.46s
✅ YAML yamllint 17 0 0.61s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

MegaLinter is graciously provided by OX Security

dependabot bot and others added 2 commits May 21, 2024 17:47
updated-dependencies:
- dependency-name: requests
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Copy link

Trivy image scan report

ghcr.io/miracum/fhir-gateway:pr-150 (debian 12.5)

21 known vulnerabilities found (HIGH: 2 MEDIUM: 5 LOW: 13 CRITICAL: 1)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
libc6 CVE-2024-33599 HIGH 2.36-9+deb12u6 2.36-9+deb12u7
libc6 CVE-2024-33600 MEDIUM 2.36-9+deb12u6 2.36-9+deb12u7
libc6 CVE-2024-33601 MEDIUM 2.36-9+deb12u6 2.36-9+deb12u7
libc6 CVE-2024-33602 MEDIUM 2.36-9+deb12u6 2.36-9+deb12u7
libc6 CVE-2010-4756 LOW 2.36-9+deb12u6
libc6 CVE-2018-20796 LOW 2.36-9+deb12u6
libc6 CVE-2019-1010022 LOW 2.36-9+deb12u6
libc6 CVE-2019-1010023 LOW 2.36-9+deb12u6
libc6 CVE-2019-1010024 LOW 2.36-9+deb12u6
libc6 CVE-2019-1010025 LOW 2.36-9+deb12u6
libc6 CVE-2019-9192 LOW 2.36-9+deb12u6
libexpat1 CVE-2023-52425 HIGH 2.5.0-1
libexpat1 CVE-2023-52426 LOW 2.5.0-1
libexpat1 CVE-2024-28757 LOW 2.5.0-1
libgcc-s1 CVE-2023-4039 MEDIUM 12.2.0-14
libgcc-s1 CVE-2022-27943 LOW 12.2.0-14
libpng16-16 CVE-2021-4214 LOW 1.6.39-2
libstdc++6 CVE-2023-4039 MEDIUM 12.2.0-14
libstdc++6 CVE-2022-27943 LOW 12.2.0-14
libuuid1 CVE-2022-0563 LOW 2.38.1-5+deb12u1
zlib1g CVE-2023-45853 CRITICAL 1:1.2.13.dfsg-1

No Misconfigurations found

@chgl chgl merged commit cd5c3ea into beta May 21, 2024
16 checks passed
@chgl chgl deleted the native-build-test branch May 21, 2024 16:04
miracum-bot pushed a commit that referenced this pull request May 21, 2024
## [3.14.0-beta.1](v3.13.0...v3.14.0-beta.1) (2024-05-21)

### Features

* added native image flavor ([#150](#150)) ([cd5c3ea](cd5c3ea))
@miracum-bot
Copy link

🎉 This PR is included in version 3.14.0-beta.1 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants