diff --git a/Dockerfile b/Dockerfile index 1a909da9b4e5a39f7de3782045177a019581e03e..787c33149fd92f189c479790bafe9081b7a009e2 100644 --- a/Dockerfile +++ b/Dockerfile @@ -7,8 +7,9 @@ FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG} as build USER 0 COPY *.whl *.tar.gz /wheel/ -RUN pip install --no-index --find-links=/wheel/ truffleHog3 - +RUN pip install --no-index --find-links=/wheel/ truffleHog3 && \ + pip install --upgrade --no-index --find-links=/wheel/ PyYAML Jinja2 + FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG} COPY --from=build /usr/local/lib/python3.9/site-packages/ /usr/local/lib/python3.9/site-packages/ @@ -29,6 +30,4 @@ USER truffleHog WORKDIR /proj ENTRYPOINT ["trufflehog3"] -CMD ["-h"] - - +CMD ["-h"] \ No newline at end of file diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml index a7b08ac9a62ee6596ac4508782e808d1ac7f57db..ebbcc563aee5bc9dda1ad05573b56ca1122d76dd 100644 --- a/hardening_manifest.yaml +++ b/hardening_manifest.yaml @@ -47,6 +47,11 @@ resources: validation: type: sha256 value: b0eaf100007721b5c16c1fc1eecb87409464edc10469ddc9a22a27a99123be49 +- filename: Jinja2-2.11.3-py2.py3-none-any.whl + url: https://files.pythonhosted.org/packages/7e/c2/1eece8c95ddbc9b1aeb64f5783a9e07a286de42191b7204d67b7496ddf35/Jinja2-2.11.3-py2.py3-none-any.whl + validation: + type: sha256 + value: 03e47ad063331dd6a3f04a43eddca8a966a26ba0c5b7207a9a9e4e08f1b29419 - filename: GitPython-3.1.0-py3-none-any.whl url: https://files.pythonhosted.org/packages/d3/2f/6a366d56c9b1355b0880be9ea66b166cb3536392638d8d91413ec66305ad/GitPython-3.1.0-py3-none-any.whl validation: @@ -57,6 +62,11 @@ resources: validation: type: sha256 value: b8eac752c5e14d3eca0e6dd9199cd627518cb5ec06add0de9d32baeee6fe645d +- filename: PyYAML-5.4.1-cp39-cp39-manylinux1_x86_64.whl + url: https://files.pythonhosted.org/packages/3d/1f/2a3705efca3b47161ceaaf52970a9d4b81cc84600818686ecd75093a00a5/PyYAML-5.4.1-cp39-cp39-manylinux1_x86_64.whl + validation: + type: sha256 + value: 74c1485f7707cf707a7aef42ef6322b8f97921bd89be2ab6317fd782c2d53183 - filename: gitdb-4.0.7-py3-none-any.whl url: https://files.pythonhosted.org/packages/ea/e8/f414d1a4f0bbc668ed441f74f44c116d9816833a48bf81d22b697090dba8/gitdb-4.0.7-py3-none-any.whl validation: