search

ministryofjustice / find-moj-data

Find MOJ data service • This repository is defined and managed in Terraform
https://find-moj-data.service.justice.gov.uk/
MIT License
5 stars 0 forks source link

:arrow_up: Move the Front end docker images to alpine latest #1037

Closed mitchdawson1982 closed 1 week ago

mitchdawson1982 commented 2 weeks ago

User Story

As a developer I expect to run docker images which contain library updates So that we keep software upto date and reduce the vulnerability footprint

Value / Purpose

Some recent image scanning has highlighted the lack of updates to our base docker images and the need for an approach to keep on top of updates going forward.

We should look to deploy the node and python alpine images as these are prebuilt on the latest os versions and are minimal in that they only contain the necessary packages required for the OS to function which means there are less libraries and therefore less opportunities for vulnerabilities.

If we opt for the given major train number and alpine this will give us all required updates throughout the life of the train, this does however add potential risks of the occasional failing build due to incompatible libraries.

Examples - image:[version number]-alpine python:3.11-alpine & node:23-alpine

Definition of Done

mitchdawson1982 commented 2 weeks ago

Image builds successfully with python:3.11-alpine3.20 & node:23-alpine3.20 images. PR

docker build -t find-moj-data:latest . && docker run --env-file .env -it -p 8000:8000 find-moj-data:latest

find-moj-data-py3.11➜  docker build  -t find-moj-data:latest . && trivy image --scanners vuln find-moj-data                       
[+] Building 95.8s (32/32) FINISHED                                                                                             
 => [internal] load .dockerignore                                                                                          0.0s
 => => transferring context: 356B                                                                                          0.0s
 => [internal] load build definition from Dockerfile                                                                       0.0s
 => => transferring dockerfile: 2.16kB                                                                                     0.0s
 => [internal] load metadata for public.ecr.aws/docker/library/python:3.11-alpine3.20                                      2.3s
 => [internal] load metadata for public.ecr.aws/docker/library/node:23-alpine3.20                                          2.3s
 => [internal] load build context                                                                                          1.8s
 => => transferring context: 3.07MB                                                                                        1.6s
 => [runtime  1/12] FROM public.ecr.aws/docker/library/python:3.11-alpine3.20@sha256:65c34f59d896f939f204e64c2f098db4a4c2  0.0s
 => [node_builder 1/5] FROM public.ecr.aws/docker/library/node:23-alpine3.20@sha256:340cd3926b5116aae1207d6ca1e444d1009aa  0.0s
 => CACHED [node_builder 2/5] RUN apk add --no-cache bash                                                                  0.0s
 => CACHED [node_builder 3/5] WORKDIR /app                                                                                 0.0s
 => CACHED [runtime  2/12] RUN pip install -U setuptools                                                                   0.0s
 => CACHED [runtime  3/12] RUN apk add --no-cache bash make netcat-openbsd                                                 0.0s
 => CACHED [runtime  4/12] WORKDIR /app                                                                                    0.0s
 => [runtime  5/12] COPY . .                                                                                               4.8s
 => [node_builder 4/5] COPY . .                                                                                            4.8s
 => [node_builder 5/5] RUN npm install --omit=dev                                                                          6.0s
 => CACHED [python_builder  2/10] RUN apk add --no-cache bash make gettext gcc musl-dev libffi-dev                         0.0s 
 => CACHED [python_builder  3/10] WORKDIR /app                                                                             0.0s
 => [python_builder  4/10] COPY --from=node_builder /app .                                                                 5.5s
 => [python_builder  5/10] RUN pip install poetry==1.8.4                                                                  11.1s
 => [python_builder  6/10] COPY pyproject.toml poetry.lock Makefile ./                                                     0.0s
 => [python_builder  7/10] COPY lib ./lib                                                                                  0.0s
 => [python_builder  8/10] COPY locale ./                                                                                  0.0s
 => [python_builder  9/10] RUN poetry install --without dev --no-root && rm -rf /tmp/poetry_cache                         32.8s
 => [python_builder 10/10] RUN make compilemessages                                                                        3.1s
 => [runtime  6/12] COPY --from=python_builder /app/static ./static                                                        0.0s
 => [runtime  7/12] COPY --from=python_builder /app/locale ./locale                                                        0.0s
 => [runtime  8/12] COPY --from=python_builder /app/.venv /app/.venv                                                       1.9s
 => [runtime  9/12] RUN chmod +x ./scripts/app-entrypoint.sh                                                               0.2s
 => [runtime 10/12] RUN python manage.py collectstatic --noinput                                                           1.9s
 => [runtime 11/12] RUN addgroup --gid 31337 --system appuser   && adduser --uid 31337 --system appuser --ingroup appuser  0.2s
 => [runtime 12/12] RUN chown --recursive appuser:appuser /app                                                            15.6s
 => exporting to image                                                                                                     2.7s
 => => exporting layers                                                                                                    2.6s
 => => writing image sha256:8874bda3d5d39c6508c32a4f36140480b6bd84f01b0ba54ef32f7af0728c6d8f                               0.0s
 => => naming to docker.io/library/find-moj-data:latest                                                                    0.0s
2024-11-13T23:10:42Z    INFO    [vuln] Vulnerability scanning is enabled
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="Deprecated" version="1.2.14"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="Django" version="5.1.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="Markdown" version="3.7"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="PyJWT" version="2.8.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="PyYAML" version="6.0.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="acryl-datahub" version="0.12.1.5"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="aiohappyeyeballs" version="2.4.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="aiohttp" version="3.10.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="aiosignal" version="1.3.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="asgiref" version="3.8.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="avro" version="1.11.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="avro-gen3" version="0.7.11"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="cached-property" version="1.5.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="certifi" version="2024.7.4"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="cffi" version="1.16.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="charset-normalizer" version="3.3.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="click" version="8.1.7"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="cryptography" version="43.0.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="deepdiff" version="6.7.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="django-azure-auth" version="2.1.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="django-debug-toolbar" version="4.4.6"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="django-prometheus" version="2.3.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="django-waffle" version="4.1.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="docker" version="7.0.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="docopt" version="0.6.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="expandvars" version="0.12.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="freezegun" version="1.5.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="frozenlist" version="1.4.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="gunicorn" version="23.0.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="hiredis" version="3.0.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="humanfriendly" version="10.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="ijson" version="3.2.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="joblib" version="1.4.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="jsonschema" version="4.22.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="jsonschema-specifications" version="2023.12.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="markdown-headdown" version="0.1.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="ministryofjustice-data-platform-catalogue" version="1.1.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="mixpanel" version="4.10.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="msal" version="1.28.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="multidict" version="6.0.5"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="mypy-extensions" version="1.0.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="nltk" version="3.9.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="notifications-python-client" version="10.0.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pip" version="24.3.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="progressbar2" version="4.4.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="prometheus_client" version="0.20.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="psutil" version="5.9.8"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="psycopg" version="3.2.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="psycopg-binary" version="3.2.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pycparser" version="2.22"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pydantic_core" version="2.18.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="python-dateutil" version="2.9.0.post0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="python-dotenv" version="1.0.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="python-utils" version="3.8.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="redis" version="5.2.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="regex" version="2024.4.28"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="requests" version="2.32.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="requests-file" version="2.0.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="rpds-py" version="0.18.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="ruamel.yaml" version="0.18.6"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="ruamel.yaml.clib" version="0.2.8"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="sentry-sdk" version="2.18.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="autocommand" version="2.2.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="typeguard" version="4.3.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="six" version="1.16.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="tabulate" version="0.9.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="termcolor" version="2.4.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="toml" version="0.10.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="tqdm" version="4.66.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="typing-inspect" version="0.9.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="wrapt" version="1.16.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="yarl" version="1.9.4"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="Deprecated" version="1.2.14"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="Django" version="5.1.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="Faker" version="30.8.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="Markdown" version="3.7"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="PyJWT" version="2.8.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="PyYAML" version="6.0.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="acryl-datahub" version="0.12.1.5"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="aiohappyeyeballs" version="2.4.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="aiohttp" version="3.10.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="aiosignal" version="1.3.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="asgiref" version="3.8.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="avro" version="1.11.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="avro-gen3" version="0.7.11"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="black" version="24.10.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="cached-property" version="1.5.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="certifi" version="2024.7.4"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="cffi" version="1.16.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="cfgv" version="3.4.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="charset-normalizer" version="3.3.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="click" version="8.1.7"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="coverage" version="7.5.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="cryptography" version="43.0.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="deepdiff" version="6.7.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="distlib" version="0.3.8"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="django-azure-auth" version="2.1.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="django-debug-toolbar" version="4.4.6"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="django-prometheus" version="2.3.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="django-waffle" version="4.1.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="djhtml" version="3.0.6"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="docker" version="7.0.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="docopt" version="0.6.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="expandvars" version="0.12.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="flake8" version="7.1.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="freezegun" version="1.5.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="frozenlist" version="1.4.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="gunicorn" version="23.0.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="h11" version="0.14.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="hiredis" version="3.0.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="humanfriendly" version="10.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="identify" version="2.5.36"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="ijson" version="3.2.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="isort" version="5.13.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="joblib" version="1.4.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="jsonschema" version="4.22.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="jsonschema-specifications" version="2023.12.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="markdown-headdown" version="0.1.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="mccabe" version="0.7.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="ministryofjustice-data-platform-catalogue" version="1.1.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="mixpanel" version="4.10.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="msal" version="1.28.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="multidict" version="6.0.5"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="mypy-extensions" version="1.0.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="nltk" version="3.9.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="nodeenv" version="1.8.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="notifications-python-client" version="10.0.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="outcome" version="1.3.0.post0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pip" version="24.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pluggy" version="1.5.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pre_commit" version="4.0.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="progressbar2" version="4.4.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="prometheus_client" version="0.20.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="psutil" version="5.9.8"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="psycopg" version="3.2.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="psycopg-binary" version="3.2.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pycodestyle" version="2.12.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pycparser" version="2.22"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pydantic_core" version="2.18.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pyflakes" version="3.2.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pytest" version="8.2.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pytest-cov" version="6.0.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pytest-django" version="4.9.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="python-dateutil" version="2.9.0.post0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="python-dotenv" version="1.0.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="python-utils" version="3.8.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="redis" version="5.2.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="regex" version="2024.4.28"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="requests" version="2.32.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="requests-file" version="2.0.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="rpds-py" version="0.18.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="ruamel.yaml" version="0.18.6"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="ruamel.yaml.clib" version="0.2.8"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="selenium" version="4.26.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="sentry-sdk" version="2.18.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="autocommand" version="2.2.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="typeguard" version="4.3.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="six" version="1.16.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="sniffio" version="1.3.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="sortedcontainers" version="2.4.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="tabulate" version="0.9.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="termcolor" version="2.4.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="toml" version="0.10.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="tqdm" version="4.66.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="trio" version="0.25.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="typing-inspect" version="0.9.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="websocket-client" version="1.8.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="wrapt" version="1.16.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="wsproto" version="1.2.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="yarl" version="1.9.4"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="Deprecated" version="1.2.14"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="Django" version="5.1.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="Faker" version="30.8.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="Markdown" version="3.7"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="PyJWT" version="2.8.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="PyYAML" version="6.0.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="acryl-datahub" version="0.12.1.5"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="aiohappyeyeballs" version="2.4.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="aiohttp" version="3.10.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="aiosignal" version="1.3.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="asgiref" version="3.8.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="avro" version="1.11.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="avro-gen3" version="0.7.11"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="black" version="24.10.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="cached-property" version="1.5.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="certifi" version="2024.7.4"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="cffi" version="1.16.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="cfgv" version="3.4.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="charset-normalizer" version="3.3.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="click" version="8.1.7"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="coverage" version="7.5.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="cryptography" version="43.0.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="deepdiff" version="6.7.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="distlib" version="0.3.8"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="django-azure-auth" version="2.1.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="django-debug-toolbar" version="4.4.6"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="django-prometheus" version="2.3.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="django-waffle" version="4.1.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="djhtml" version="3.0.6"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="docker" version="7.0.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="docopt" version="0.6.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="expandvars" version="0.12.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="flake8" version="7.1.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="freezegun" version="1.5.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="frozenlist" version="1.4.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="gunicorn" version="23.0.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="h11" version="0.14.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="hiredis" version="3.0.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="humanfriendly" version="10.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="identify" version="2.5.36"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="ijson" version="3.2.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="isort" version="5.13.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="joblib" version="1.4.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="jsonschema" version="4.22.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="jsonschema-specifications" version="2023.12.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="markdown-headdown" version="0.1.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="mccabe" version="0.7.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="ministryofjustice-data-platform-catalogue" version="1.1.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="mixpanel" version="4.10.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="msal" version="1.28.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="multidict" version="6.0.5"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="mypy-extensions" version="1.0.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="nltk" version="3.9.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="nodeenv" version="1.8.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="notifications-python-client" version="10.0.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="outcome" version="1.3.0.post0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pip" version="24.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pip" version="24.3.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pluggy" version="1.5.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pre_commit" version="4.0.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="progressbar2" version="4.4.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="prometheus_client" version="0.20.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="psutil" version="5.9.8"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="psycopg" version="3.2.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="psycopg-binary" version="3.2.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pycodestyle" version="2.12.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pycparser" version="2.22"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pydantic_core" version="2.18.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pyflakes" version="3.2.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pytest" version="8.2.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pytest-cov" version="6.0.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="pytest-django" version="4.9.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="python-dateutil" version="2.9.0.post0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="python-dotenv" version="1.0.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="python-utils" version="3.8.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="redis" version="5.2.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="regex" version="2024.4.28"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="requests" version="2.32.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="requests-file" version="2.0.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="rpds-py" version="0.18.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="ruamel.yaml" version="0.18.6"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="ruamel.yaml.clib" version="0.2.8"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="selenium" version="4.26.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="sentry-sdk" version="2.18.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="autocommand" version="2.2.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="typeguard" version="4.3.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="six" version="1.16.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="sniffio" version="1.3.1"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="sortedcontainers" version="2.4.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="tabulate" version="0.9.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="termcolor" version="2.4.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="toml" version="0.10.2"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="tqdm" version="4.66.3"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="trio" version="0.25.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="typing-inspect" version="0.9.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="websocket-client" version="1.8.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="wrapt" version="1.16.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="wsproto" version="1.2.0"
2024-11-13T23:11:06Z    INFO    [python] License acquired from METADATA classifiers may be subject to additional terms  name="yarl" version="1.9.4"
2024-11-13T23:11:06Z    INFO    Detected OS     family="alpine" version="3.20.3"
2024-11-13T23:11:06Z    INFO    [alpine] Detecting vulnerabilities...   os_version="3.20" repository="3.20" pkg_num=41
2024-11-13T23:11:06Z    INFO    Number of language-specific files       num=1
2024-11-13T23:11:06Z    INFO    [python-pkg] Detecting vulnerabilities...

find-moj-data (alpine 3.20.3)

Total: 0 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 0)