bump 8.8

Dockerfile

@@ -2,7 +2,7 @@ ARG BASE_REGISTRY=registry1.dso.mil
 ARG BASE_IMAGE=ironbank/redhat/openjdk/openjdk11
 ARG BASE_TAG=1.11
 
-FROM sonarqube:8.7.1-community AS build
+FROM sonarqube:8.8-community AS build
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 

hardening_manifest.yaml

@@ -8,7 +8,7 @@ name: "sonarsource/sonarqube/sonarqube8-community"
 # The most specific version should be the first tag and will be shown
 # on ironbank.dsop.io
 tags:
-- "8.7.1-community"
+- "8.8-community"
 - "latest"
 
 # Build args passed to Dockerfile ARGs
@@ -27,7 +27,7 @@ labels:
   org.opencontainers.image.url: "https://docs.sonarqube.org/latest/"
   ## Name of the distributing entity, organization or individual
   org.opencontainers.image.vendor: "SonarSource SA"
-  org.opencontainers.image.version: "8.7.1-community"
+  org.opencontainers.image.version: "8.8-community"
   ## Keywords to help with search (ex. "cicd,gitops,golang")
   mil.dso.ironbank.image.keywords: "cicd,devops,sast,review"
   ## This value can be "opensource" or "commercial"
@@ -37,8 +37,8 @@ labels:
 
 # List of resources to make available to the offline build context
 resources:
-- url: docker://docker.io/library/sonarqube@sha256:0ecf7b8b94efa1d010054f8b930e671c4415b6673e8e3bafa6d0a8c6b62d546f
-  tag: sonarqube:8.7.1-community
+- url: docker://docker.io/library/sonarqube@sha256:0d7f77f6180522cd3724c8764f68f9c4a0318f3bcff0689447a70e691b659aaa
+  tag: sonarqube:8.8-community
 
 # List of project maintainers
 maintainers:

scripts/Kptfile

@@ -5,10 +5,10 @@ metadata:
 upstream:
     type: git
     git:
-        commit: cccf2b692431e2eca2bb77ab9ae749b2b54ddf6a
+        commit: 277ec116b3df9556f975b7af328c053316bb2c2d
         repo: https://github.com/SonarSource/docker-sonarqube
         directory: /8/community
-        ref: "8.6"
+        ref: 8.7.1
 packageMetadata:
     shortDescription: vendor scripts sync
 dependencies: