chore(deps): update nuget non-major dependencies (#543)

* chore(deps): update nuget non-major dependencies * Replace azure container scan --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: tba76 <[email protected]>
Altinn · Nov 8, 2024 · 637baca · 637baca
1 parent 38a5dd9
commit 637baca
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 5 deletions.
diff --git a/.github/workflows/container-scan.yml b/.github/workflows/container-scan.yml
@@ -22,8 +22,15 @@ jobs:
     - name: Build the Docker image
       run: docker build . --tag altinn-storage:${{github.sha}}
 
-    - uses: Azure/[email protected]
+    - name: Run Trivy vulnerability scanner
+      uses: aquasecurity/[email protected]
       with:
-        image-name: altinn-storage:${{ github.sha }}
+        image-ref: 'altinn-storage:${{ github.sha }}'
+        format: 'table'
+        exit-code: '1'
+        ignore-unfixed: true
+        vuln-type: 'os,library'
+        severity: 'CRITICAL,HIGH'
       env:
-        DOCKLE_HOST: "unix:///var/run/docker.sock"
+        TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db,aquasec/trivy-db,ghcr.io/aquasecurity/trivy-db
+        TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db,aquasec/trivy-java-db,ghcr.io/aquasecurity/trivy-java-db
diff --git a/src/Storage/Altinn.Platform.Storage.csproj b/src/Storage/Altinn.Platform.Storage.csproj
@@ -9,9 +9,9 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Altinn.Common.AccessToken" Version="4.5.2" />
+    <PackageReference Include="Altinn.Common.AccessToken" Version="4.5.3" />
 
-    <PackageReference Include="Altinn.Common.AccessTokenClient" Version="3.0.8" />
+    <PackageReference Include="Altinn.Common.AccessTokenClient" Version="3.0.9" />
     <PackageReference Include="Altinn.Platform.Models" Version="1.6.1" /> 
     <PackageReference Include="Altinn.Platform.Storage.Interface" Version="4.0.3" />
     <PackageReference Include="Azure.Extensions.AspNetCore.Configuration.Secrets" Version="1.3.2" />