diff --git a/.github/workflows/build-package-python-sci.yml b/.github/workflows/build-package-python-sci.yml index bf19c18..21d59b0 100644 --- a/.github/workflows/build-package-python-sci.yml +++ b/.github/workflows/build-package-python-sci.yml @@ -69,6 +69,7 @@ jobs: ignore-unfixed: true vuln-type: 'os,library' severity: 'CRITICAL,HIGH' + scanners: 'vuln' # this requires public repo / additional config #format: 'sarif' diff --git a/docker/python-sci/Dockerfile b/docker/python-sci/Dockerfile index 805f855..984a6cb 100644 --- a/docker/python-sci/Dockerfile +++ b/docker/python-sci/Dockerfile @@ -32,8 +32,9 @@ RUN conda config --set solver classic && \ shapely==2.0.2 \ pillow==10.2.0 \ flask==2.3.2 \ - gunicorn==21.2.0 \ + gunicorn==22.0.0 \ python-logging-rabbitmq==2.0.0 \ + stdlib==1.22.4 \ && conda clean -y --all # Get the latest package updates to keep security vulnerabilities down diff --git a/docker/python-sci/arm64/Dockerfile b/docker/python-sci/arm64/Dockerfile deleted file mode 100644 index fdb1d49..0000000 --- a/docker/python-sci/arm64/Dockerfile +++ /dev/null @@ -1,39 +0,0 @@ -FROM continuumio/miniconda3:23.3.1-0 - -ARG maintainer -LABEL maintainer ${maintainer} - -# Setup ENV -ENV CONDA_DIR /opt/conda -ENV PATH $CONDA_DIR/bin:$PATH -ENV SHELL /bin/bash -ENV LC_ALL en_US.UTF-8 -ENV LANG en_US.UTF-8 -ENV LANGUAGE en_US.UTF-8 - -# Install dependencies (and force Python 3.11 update) -RUN conda config --add channels conda-forge && \ - conda install -y python=3.11 && \ - conda install -y \ - pika==1.3.1 \ - python-dateutil==2.9.0 \ - pint==0.21 \ - numpy==1.24.3 \ - netcdf4==1.6.3 \ - h5netcdf==1.1.0 \ - pygrib==2.1.4 \ - awscli==1.27.161 \ - jsonschema==4.19.0 \ - pillow==10.0.1 \ - python-logging-rabbitmq==2.0.0 \ - && conda clean -y --all - -# Get the latest package updates to keep security vulnerabilities down -#RUN apk update && apk upgrade - -# Install idsse common python code -WORKDIR /python/idsse_common - -COPY ./python/idsse_common /python/idsse_common - -RUN python /python/idsse_common/setup.py install \ No newline at end of file