Dockerfile

@@ -2,7 +2,7 @@ ARG BASE_REGISTRY=registry1.dso.mil
 ARG BASE_IMAGE=ironbank/opensource/nodejs/nodejs14
 ARG BASE_TAG=14.17.0
 
-FROM mitre/heimdall2:2.4.8 AS source
+FROM mitre/heimdall2:2.5.0 AS source
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 

hardening_manifest.yaml

@@ -8,7 +8,7 @@ name: "mitre/saf/heimdall2"
 # The most specific version should be the first tag and will be shown
 # on ironbank.dso.mil
 tags:
-- "2.4.8"
+- "2.5.0"
 - "latest"
 
 # Build args passed to Dockerfile ARGs
@@ -29,7 +29,7 @@ labels:
   # Name of the distributing entity, organization or individual
   org.opencontainers.image.vendor: "MITRE"
   # Authoritative version of the software
-  org.opencontainers.image.version: "2.4.8"
+  org.opencontainers.image.version: "2.5.0"
   # Keywords to help with search (ex. "cicd,gitops,golang")
   mil.dso.ironbank.image.keywords: "saf"
   # This value can be "opensource" or "commercial"
@@ -47,8 +47,8 @@ resources:
       value: 2c320de14a6014f62d29c34fec78fdbb0bc71c9ccba48ed0668de452c1f5fe6c
 
   # This is the official upstream docker image of Heimdall2
-  - tag: mitre/heimdall2:2.4.8
-    url: docker://docker.io/mitre/heimdall2@sha256:fe28f450161935947b219d81aa04cd1cdb1aac02b139f6e139d085a7dee6ef2c
+  - tag: mitre/heimdall2:2.5.0
+    url: docker://docker.io/mitre/heimdall2@sha256:1084872b6acf9ad0f8ea951ab20f19ef6758c90e860dde68983c6e6fa4eb6e6d
 
 # List of project maintainers
 maintainers: