search

miracum / fhir-gateway

A thin layer between FHIR REST clients and resource processing pipelines.
Apache License 2.0
13 stars 7 forks source link

feat: add native image flavor #150

Closed chgl closed 5 months ago

github-actions[bot] commented 5 months ago

Code Coverage Report

Overall Project 28.96% :x:

There is no coverage information present for the Files changed

github-actions[bot] commented 5 months ago

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 4 0 0.05s
✅ DOCKERFILE hadolint 2 0 0.1s
✅ EDITORCONFIG editorconfig-checker 72 0 0.51s
✅ GROOVY npm-groovy-lint 2 0 9.47s
✅ JAVA checkstyle 18 0 4.92s
✅ JSON jsonlint 11 0 0.36s
✅ JSON prettier 11 0 3.34s
✅ JSON v8r 11 0 5.06s
✅ MARKDOWN markdownlint 2 0 0.79s
✅ PYTHON bandit 1 0 1.05s
✅ PYTHON black 1 0 1.03s
✅ PYTHON flake8 1 0 0.71s
✅ PYTHON isort 1 0 0.36s
✅ PYTHON mypy 1 0 8.01s
✅ PYTHON ruff 1 0 0.02s
✅ REPOSITORY checkov yes no 18.71s
✅ REPOSITORY gitleaks yes no 1.31s
✅ REPOSITORY git_diff yes no 0.03s
✅ REPOSITORY grype yes no 13.38s
✅ REPOSITORY kics yes no 5.15s
✅ REPOSITORY secretlint yes no 1.22s
✅ REPOSITORY syft yes no 2.63s
✅ REPOSITORY trivy yes no 8.95s
✅ REPOSITORY trivy-sbom yes no 5.96s
✅ REPOSITORY trufflehog yes no 4.1s
✅ SQL sql-lint 1 0 0.4s
✅ XML xmllint 1 0 0.01s
✅ YAML prettier 17 0 1.46s
✅ YAML yamllint 17 0 0.61s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

_MegaLinter is graciously provided by OX Security_

github-actions[bot] commented 5 months ago

Trivy image scan report

ghcr.io/miracum/fhir-gateway:pr-150 (debian 12.5)

21 known vulnerabilities found (HIGH: 2 MEDIUM: 5 LOW: 13 CRITICAL: 1)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
libc6 CVE-2024-33599 HIGH 2.36-9+deb12u6 2.36-9+deb12u7
libc6 CVE-2024-33600 MEDIUM 2.36-9+deb12u6 2.36-9+deb12u7
libc6 CVE-2024-33601 MEDIUM 2.36-9+deb12u6 2.36-9+deb12u7
libc6 CVE-2024-33602 MEDIUM 2.36-9+deb12u6 2.36-9+deb12u7
libc6 CVE-2010-4756 LOW 2.36-9+deb12u6
libc6 CVE-2018-20796 LOW 2.36-9+deb12u6
libc6 CVE-2019-1010022 LOW 2.36-9+deb12u6
libc6 CVE-2019-1010023 LOW 2.36-9+deb12u6
libc6 CVE-2019-1010024 LOW 2.36-9+deb12u6
libc6 CVE-2019-1010025 LOW 2.36-9+deb12u6
libc6 CVE-2019-9192 LOW 2.36-9+deb12u6
libexpat1 CVE-2023-52425 HIGH 2.5.0-1
libexpat1 CVE-2023-52426 LOW 2.5.0-1
libexpat1 CVE-2024-28757 LOW 2.5.0-1
libgcc-s1 CVE-2023-4039 MEDIUM 12.2.0-14
libgcc-s1 CVE-2022-27943 LOW 12.2.0-14
libpng16-16 CVE-2021-4214 LOW 1.6.39-2
libstdc++6 CVE-2023-4039 MEDIUM 12.2.0-14
libstdc++6 CVE-2022-27943 LOW 12.2.0-14
libuuid1 CVE-2022-0563 LOW 2.38.1-5+deb12u1
zlib1g CVE-2023-45853 CRITICAL 1:1.2.13.dfsg-1

No Misconfigurations found

miracum-bot commented 5 months ago

:tada: This PR is included in version 3.14.0-beta.1 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket: