diff --git a/Dockerfile b/Dockerfile index 8d05097ee131ae13b646400fd7f724cb3b37b2c3..3c0efa416249bca134a01d4764108f5e9396f034 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,6 +1,6 @@ ARG BASE_REGISTRY=registry1.dso.mil ARG BASE_IMAGE=ironbank/redhat/ubi/ubi8 -ARG BASE_TAG=latest +ARG BASE_TAG=8.3 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG} diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml index ca5c9defbadd2793fbd30bf1447a0f870f848873..b147208af1d4dfc5797f9de599000ba0ef39345e 100644 --- a/hardening_manifest.yaml +++ b/hardening_manifest.yaml @@ -38,30 +38,30 @@ labels: # List of resources to make available to the offline build context resources: - filename: mongodb-org.rpm - url: https://repo.mongodb.org/yum/redhat/8/mongodb-org/4.4/x86_64/RPMS/mongodb-org-4.4.1-1.el8.x86_64.rpm + url: https://repo.mongodb.org/yum/redhat/8/mongodb-org/4.4/x86_64/RPMS/mongodb-org-4.4.4-1.el8.x86_64.rpm validation: type: sha256 - value: fdcfae773806144b2072882cdc3757293d354617940ed882bdc04fbb774f452f + value: 10fb7ac5ee56b6159998a20c7336202966c39684d13d53b61e99af70979b0cf8 - filename: mongodb-org-mongos.rpm - url: https://repo.mongodb.org/yum/redhat/8/mongodb-org/4.4/x86_64/RPMS/mongodb-org-mongos-4.4.1-1.el8.x86_64.rpm + url: https://repo.mongodb.org/yum/redhat/8/mongodb-org/4.4/x86_64/RPMS/mongodb-org-mongos-4.4.4-1.el8.x86_64.rpm validation: type: sha256 - value: c9b8011ca350157a83b93e02cc7a120a0b96255d609d20b87971222a2cf8acb0 + value: 401915517718ffb6a184c17eabf844451619a570c7e3e60861deac7ec00aa7d1 - filename: mongodb-org-server.rpm - url: https://repo.mongodb.org/yum/redhat/8/mongodb-org/4.4/x86_64/RPMS/mongodb-org-server-4.4.1-1.el8.x86_64.rpm + url: https://repo.mongodb.org/yum/redhat/8/mongodb-org/4.4/x86_64/RPMS/mongodb-org-server-4.4.4-1.el8.x86_64.rpm validation: type: sha256 - value: 76f7e65e39c5ca563f7dc15868f2accc43da6f0654eb72ef054407f7755d841f + value: 03c5c54e0f8abfee94c6f52020101c2f47ef317ed5ef0859716377f7d74f9356 - filename: mongodb-org-shell.rpm - url: https://repo.mongodb.org/yum/redhat/8/mongodb-org/4.4/x86_64/RPMS/mongodb-org-shell-4.4.1-1.el8.x86_64.rpm + url: https://repo.mongodb.org/yum/redhat/8/mongodb-org/4.4/x86_64/RPMS/mongodb-org-shell-4.4.4-1.el8.x86_64.rpm validation: type: sha256 - value: 9089c4d5dd05cde71c7ed509454c8158251def4c5b0cc0b9b03940dc18696cc0 + value: 4954fe92d5642056752561b7f4c5278a4f47619cf7b488d1676c016c714744b3 - filename: mongodb-org-tools.rpm - url: https://repo.mongodb.org/yum/redhat/8/mongodb-org/4.4/x86_64/RPMS/mongodb-org-tools-4.4.1-1.el8.x86_64.rpm + url: https://repo.mongodb.org/yum/redhat/8/mongodb-org/4.4/x86_64/RPMS/mongodb-org-tools-4.4.4-1.el8.x86_64.rpm validation: type: sha256 - value: b8ef170cd79cf53a2ebda6288ee31ee8e8f6757991ffb6cfc3092b930927c832 + value: 681909f6ed89ee9004a16ab874b50c898f4e94a40da4f378d27944fb5466648a - filename: js-yaml.js url: https://raw.githubusercontent.com/nodeca/js-yaml/3.13.0/dist/js-yaml.js validation: @@ -78,15 +78,15 @@ resources: type: sha256 value: 0b843df6d86e270c5b0f5cbd3c326a04e18f4b7f9b8457fa497b0454c4b138d7 - filename: mongodb-database-tools.rpm - url: https://repo.mongodb.org/yum/redhat/8/mongodb-org/4.4/x86_64/RPMS/mongodb-database-tools-100.2.0.x86_64.rpm + url: https://repo.mongodb.org/yum/redhat/8/mongodb-org/4.4/x86_64/RPMS/mongodb-database-tools-100.3.1.x86_64.rpm validation: type: sha256 - value: 0d330820e283eb47bec82fe37306b0e759de7e97995b33f1ef73c9fbfd723b22 + value: 66d18afe97a5e4b9c229125616ef35ba5ee050ab06f642403e99749048fd188d - filename: mongodb-org-database-tools-extra.rpm - url: https://repo.mongodb.org/yum/redhat/8/mongodb-org/4.4/x86_64/RPMS/mongodb-org-database-tools-extra-4.4.1-1.el8.x86_64.rpm + url: https://repo.mongodb.org/yum/redhat/8/mongodb-org/4.4/x86_64/RPMS/mongodb-org-database-tools-extra-4.4.4-1.el8.x86_64.rpm validation: type: sha256 - value: b22e8118bacf3311c65bc65e6e1975dfb0e31ee86cfd4452d3e82ac64bdead64 + value: e772847b77b356ff1aad03f09a7cfcfd5aa389e06fa86169628a20a32f9dada5 # List of project maintainers # FIXME: Fill in the following details for the current container owner in the whitelist