chore(findings): sonarsource/sonarqube/sonarqube8-developer

Summary

sonarsource/sonarqube/sonarqube8-developer has 8 new findings discovered during continuous monitoring.

id	source	package
CVE-2021-35515	anchore_cve	commons_compress-1.20
CVE-2021-35515	anchore_cve	commons_compress-1.20
CVE-2021-35516	anchore_cve	commons_compress-1.20
CVE-2021-35516	anchore_cve	commons_compress-1.20
CVE-2021-35517	anchore_cve	commons_compress-1.20
CVE-2021-35517	anchore_cve	commons_compress-1.20
CVE-2021-36090	anchore_cve	commons_compress-1.20
CVE-2021-36090	anchore_cve	commons_compress-1.20

More information can be found in the failed pipeline located here: https://repo1.dso.mil/dsop/sonarsource/sonarqube/sonarqube8-developer/-/jobs/6073467

Definition of Done

Justifications:

• All findings have been justified
• Justifications have been provided to the container hardening team

Approval Process:

• Findings Approver has reviewed and approved all justifications
• Approval request has been sent to Authorizing Official
• Approval request has been processed by Authorizing Official