Demonstrate patching of vulnerabilities detected by Grype - Githubissues

nasa / opera-sds-pge

Observational Products for End-Users from Remote Sensing Analysis (OPERA)

Apache License 2.0

16 stars 6 forks source link

Demonstrate patching of vulnerabilities detected by Grype #477

Closed RKuttruff closed 3 months ago

RKuttruff commented 3 months ago

Description

This PR demonstrates the patching of some vulnerabilities in the DSWx_S1 PGE image as detected by Grype. It demonstrates it is possible, though a bit tedious to work out compatibility issues. To facilitate faster checking, I added the Grype scan to the integration pipeline as well, at least temporarily.

Affected Issues

472

Testing

Tested on the integration pipeline in the sandbox. As of commit 0c91933, all tests and qa evaluations seem to be passing and the selected vulnerabilities are removed from the report.

RKuttruff commented 3 months ago

Due to concerns from ADT, rolling back dependency updates to just those used by PGE code so as not to impact SAS function/stability/performance.