tag with patch release

Dockerfile

-ARG BASE_REGISTRY=registry1.dsop.io
+ARG BASE_REGISTRY=registry1.dso.mil
 ARG BASE_IMAGE=ironbank/redhat/openjdk/openjdk11
 ARG BASE_TAG=1.11
 
-FROM sonarqube:8.7-community AS build
+FROM sonarqube:8.7.1-community AS build
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 

hardening_manifest.yaml

@@ -8,7 +8,7 @@ name: "sonarsource/sonarqube/sonarqube8-community"
 # The most specific version should be the first tag and will be shown
 # on ironbank.dsop.io
 tags:
-- "8.7-community"
+- "8.7.1-community"
 - "latest"
 
 # Build args passed to Dockerfile ARGs
@@ -27,7 +27,7 @@ labels:
   org.opencontainers.image.url: "https://docs.sonarqube.org/latest/"
   ## Name of the distributing entity, organization or individual
   org.opencontainers.image.vendor: "SonarSource SA"
-  org.opencontainers.image.version: "8.7-community"
+  org.opencontainers.image.version: "8.7.1-community"
   ## Keywords to help with search (ex. "cicd,gitops,golang")
   mil.dso.ironbank.image.keywords: "cicd,devops,sast,review"
   ## This value can be "opensource" or "commercial"
@@ -37,8 +37,8 @@ labels:
 
 # List of resources to make available to the offline build context
 resources:
-- url: docker://docker.io/library/sonarqube@sha256:13a30125ee86c41a61c5843f4985585eb612880921d75430e097e1cd2d3e6211
-  tag: sonarqube:8.7-community
+- url: docker://docker.io/library/sonarqube@sha256:0ecf7b8b94efa1d010054f8b930e671c4415b6673e8e3bafa6d0a8c6b62d546f
+  tag: sonarqube:8.7.1-community
 
 # List of project maintainers
 maintainers: