deps removed from manifest. Dockerfiled modified

Dockerfile

@@ -3,35 +3,32 @@ ARG BASE_IMAGE=ironbank/redhat/openjdk/openjdk17
 ARG BASE_TAG=1.17
 ARG DEPENDENCY=target/dependency
 
-FROM registry1.dso.mil/ironbank/opensource/maven/maven-openjdk-17:3.8.5-openjdk-17 as base 
-
+FROM registry1.dso.mil/ironbank/opensource/maven/maven-openjdk-17:3.8.5-openjdk-17 as base
 USER 0
+
 RUN pwd && \
     ls -al
 
 COPY elrraggregator-1.0.tar.gz .
-COPY *.jar .
 
-RUN pwd && \
-    ls -al
+RUN tar -xvf ./elrraggregator-1.0.tar.gz --strip-components=1 && \
+    pwd && \
+    ls -al &&\
+    #echo "running maven build" && \
+    #mvn clean install -e -Dmaven.test.skip=true && \
+    #mkdir -p target/dependency && (cd target/dependency; jar -xf ../elrraggregator-0.0.1-SNAPSHOT.jar) && \
+    mkdir -p target/dependency
+    #mkdir -p target/dependency && (cd target/dependency; jar -xf ../*.jar)
 
 RUN dnf update -y && \
     dnf install -y java-devel && \
     dnf clean all && \
     rm -rf /var/cache/dnf \
 
-RUN tar -xvf ./elrraggregator-1.0.tar.gz --strip-components=1 && \
-    pwd && \
-    ls -al &&\
-    #echo "running maven build" && \
-    mvn clean install -e -Dmaven.test.skip=true && \
-    #mkdir -p target/dependency && (cd target/dependency; jar -xf ../elrraggregator-0.0.1-SNAPSHOT.jar)
-    mkdir -p target/dependency && (cd target/dependency; jar -xf ../*.jar)
-
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG} as runner
 
-ENV JAVA_HOME /usr/lib/jvm/openjdk-17/
-ENV PATH $JAVA_HOME/bin:$PATH
+#ENV JAVA_HOME /usr/lib/jvm/openjdk-17/
+#ENV PATH $JAVA_HOME/bin:$PATH
 
 #COPY --from=base /usr/lib/jvm/openjdk-15/ /usr/lib/jvm/openjdk-15/
 COPY --from=base ${DEPENDENCY}/BOOT-INF/lib /app/lib
@@ -39,8 +36,9 @@ COPY --from=base ${DEPENDENCY}/META-INF /app/META-INF
 COPY --from=base ${DEPENDENCY}/BOOT-INF/classes /app
 
 RUN dnf update -y && \
+    dnf install -y java-devel && \
     dnf clean all && \
-    rm -rf /var/cache/dnf
+    rm -rf /var/cache/dnf \
 
 USER 1001
 

Dockerfile-COPY

-ARG BASE_REGISTRY=registry1.dso.mil
-ARG BASE_IMAGE=redhat/openjdk/openjdk17
-ARG BASE_TAG=1.17
-ARG DEPENDENCY=target/dependency
-
-FROM registry1.dso.mil/ironbank/opensource/maven/maven-openjdk-17:3.8.5-openjdk-17 as base
-
-USER 0
-
-COPY elrraggregator-1.0.tar.gz .
-COPY *.jar .
-
-
-RUN dnf update -y && \
-  dnf install -y java-devel && \
-  dnf clean all && \
-  rm -rf /var/cache/dnf \
-
-RUN echo "extracting elrraggregator-1.0.tar.gz" && \
-  tar -xvf ./elrraggregator-1.0.tar.gz --strip-components=1 && \
-  echo "List present working directory" && \
-  pwd && \
-  echo "listing all files/permissions" && \
-  ls -al &&\
-  echo "running maven build" && \
-  mvn clean install -e -Dmaven.test.skip=true && \
-  echo "running another command" && \
-  mkdir -p target/dependency && (cd target/dependency; jar -xf ../elrraggregator-0.0.1-SNAPSHOT.jar)
-
-FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG} as runner
-ENV JAVA_HOME /usr/lib/jvm/openjdk-17/
-ENV PATH $JAVA_HOME/bin:$PATH
-
-#COPY --from=base /usr/lib/jvm/openjdk-15/ /usr/lib/jvm/openjdk-15/
-COPY --from=base ${DEPENDENCY}/BOOT-INF/lib /app/lib
-COPY --from=base ${DEPENDENCY}/META-INF /app/META-INF
-COPY --from=base ${DEPENDENCY}/BOOT-INF/classes /app
-
-RUN dnf update -y && \
-    dnf clean all && \
-    rm -rf /var/cache/dnf \
-
-USER 1001
-
-ENTRYPOINT ["java","-cp","app:app/lib/*","-Dspring.profiles.active=${ENV}","-Djasypt.encryptor.password=${NAME}","com.deloitte.elrr.elrrconsolidate.ElrrConsolidateApplication"]
\ No newline at end of file

hardening_manifest.yaml

@@ -36,101 +36,6 @@ resources:
   validation:
     type: "sha256"
     value: "bc04a256af75ae224859eab2cdb0e1dda55196474c54600b051cd8f0a51a95dd"
-- url: "https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-starter-data-rest/2.6.4/spring-boot-starter-data-rest-2.6.4.jar"
-  filename: "spring-boot-starter-data-rest-2.6.4.jar"
-  validation:
-    type: "sha256"
-    value: "26e1810c258d04c8f044d7b89dee19fd7254989b2b324d2d16db1dbcb9096334"
-- url: "https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-starter-web/2.6.4/spring-boot-starter-web-2.6.4.jar"
-  filename: "spring-boot-starter-web-2.6.4.jar"
-  validation:
-    type: "sha256"
-    value: "a3a3fb70e7b48739cf627a11566711732a3cc3790c8c99f2b3ddca21dd0634fd"
-- url: "https://repo.maven.apache.org/maven2/org/springframework/kafka/spring-kafka/2.8.3/spring-kafka-2.8.3.jar"
-  filename: "spring-kafka-2.8.3.jar"
-  validation:
-    type: "sha256"
-    value: "119230c0d7d8b25036033b9e05b3c3a2dcaf755b790449e9a503f23568f973fa"
-- url: "https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-starter-test/2.6.4/spring-boot-starter-test-2.6.4.jar"
-  filename: "spring-boot-starter-test-2.6.4.jar"
-  validation:
-    type: "sha256"
-    value: "a401a840052c777d470100c01aa46e8b31a5f74f4e476fc1f6f1d7c6529ed10f"
-- url: "https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-starter-data-jpa/2.6.4/spring-boot-starter-data-jpa-2.6.4.jar"
-  filename: "spring-boot-starter-data-jpa-2.6.4.jar"
-  validation:
-    type: "sha256"
-    value: "e1fd4e28253643333cf5a578d9ce8878ae41188cd0185cf166a8e1a1d8b059ec"
-- url: "https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-starter-validation/2.6.4/spring-boot-starter-validation-2.6.4.jar"
-  filename: "spring-boot-starter-validation-2.6.4.jar"
-  validation:
-    type: "sha256"
-    value: "559b31bfec0983f1becc5be87dd49cdd77b6b115e2e11d682c33b4b1cc754b51"
-- url: "https://repo.maven.apache.org/maven2/org/projectlombok/lombok/1.18.22/lombok-1.18.22.jar"
-  filename: "lombok-1.18.22.jar"
-  validation:
-    type: "sha256"
-    value: "ecef1581411d7a82cc04281667ee0bac5d7c0a5aae74cfc38430396c91c31831"
-- url: "https://repo.maven.apache.org/maven2/org/json/json/20200518/json-20200518.jar"
-  filename: "json-20200518.jar"
-  validation:
-    type: "sha256"
-    value: "0ff30e6da82f15afaf0e76bd6e996a7ab5566851166a83f973c64a9a0f946d2d"
-- url: "https://repo.maven.apache.org/maven2/commons-codec/commons-codec/1.15/commons-codec-1.15.jar"
-  filename: "commons-codec-1.15.jar"
-  validation:
-    type: "sha256"
-    value: "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
-- url: "https://repo.maven.apache.org/maven2/javax/xml/bind/jaxb-api/2.3.1/jaxb-api-2.3.1.jar"
-  filename: "jaxb-api-2.3.1.jar"
-  validation:
-    type: "sha256"
-    value: "88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06"
-- url: "https://repo.maven.apache.org/maven2/org/postgresql/postgresql/42.3.3/postgresql-42.3.3.jar"
-  filename: "postgresql-42.3.3.jar"
-  validation:
-    type: "sha256"
-    value: "eed0604f512ba44817954de99a07e2a5470aa4bfcb481d4e63a93e0ff0e0aede"
-- url: "https://repo.maven.apache.org/maven2/com/h2database/h2/1.4.200/h2-1.4.200.jar"
-  filename: "h2-1.4.200.jar"
-  validation:
-    type: "sha256"
-    value: "3ad9ac4b6aae9cd9d3ac1c447465e1ed06019b851b893dd6a8d76ddb6d85bca6"
-- url: "https://repo.maven.apache.org/maven2/com/github/ulisesbocchio/jasypt-spring-boot-starter/3.0.3/jasypt-spring-boot-starter-3.0.3.jar"
-  filename: "jasypt-spring-boot-starter-3.0.3.jar"
-  validation:
-    type: "sha256"
-    value: "fc76297737ef9ad45cc5c1b79c89d190ce1a70a79ef6a902f9480ca352dec83f"
-- url: "https://repo.maven.apache.org/maven2/org/javassist/javassist/3.23.1-GA/javassist-3.23.1-GA.jar"
-  filename: "javassist-3.23.1-GA.jar"
-  validation:
-    type: "sha256"
-    value: "d2b14c09763523374624f32a09d6e31fcb174082a97addb5ae2d580b474fd806"
-- url: "https://repo.maven.apache.org/maven2/org/modelmapper/modelmapper/2.4.1/modelmapper-2.4.1.jar"
-  filename: "modelmapper-2.4.1.jar"
-  validation:
-    type: "sha256"
-    value: "aeecf6e94c6827d054f27ac64729d9e0d0821751dd417bba0ee01a4741e76c24"
-- url: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-joda/2.13.1/jackson-datatype-joda-2.13.1.jar"
-  filename: "jackson-datatype-joda-2.13.1.jar"
-  validation:
-    type: "sha256"
-    value: "2af7f0650a90ec4a411393d7f4c1f9651eb1de7562ec910bf741dba3cf916c54"
-- url: "https://repo.maven.apache.org/maven2/com/vladmihalcea/hibernate-types-55/2.12.0/hibernate-types-55-2.12.0.jar"
-  filename: "hibernate-types-55-2.12.0.jar"
-  validation:
-    type: "sha256"
-    value: "5968059ea164c7022356f0c09c05f490da6531a0a67d712fa9cb8757658684f8"
-- url: "https://repo.maven.apache.org/maven2/junit/junit/4.13.2/junit-4.13.2.jar"
-  filename: "junit-4.13.2.jar"
-  validation:
-    type: "sha256"
-    value: "8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3"
-- url: "https://repo.maven.apache.org/maven2/gov/adlnet/jxapi/2.0.1/jxapi-2.0.1.jar"
-  filename: "jxapi-2.0.1.jar"
-  validation:
-    type: "sha256"
-    value: "8b459182d5d30838896b7928bf860741deb203a347fecfb4b27d16c9c764ba1a"
 
 # List of project maintainers
 maintainers: