Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update gcr.io/cloudsql-docker/gce-proxy Docker tag from 1.35.1 to v1.35.2 (helm/defectdojo/values.yaml) #10216

Merged
merged 1 commit into from
May 16, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 15, 2024

Mend Renovate

This PR contains the following updates:

Package Update Change
gcr.io/cloudsql-docker/gce-proxy patch 1.35.1 -> 1.35.2

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label May 15, 2024
@github-actions github-actions bot added the helm label May 15, 2024
Copy link

dryrunsecurity bot commented May 15, 2024

Hi there 👋, @DryRunSecurity here, below is a summary of our analysis and findings.

DryRun Security Status Findings
AppSec Analyzer 0 findings
Authn/Authz Analyzer 0 findings
Configured Codepaths Analyzer 0 findings
Sensitive Files Analyzer 0 findings
Secrets Analyzer 0 findings

Note

🟢 Risk threshold not exceeded.

Change Summary (click to expand)

The following is a summary of changes in this pull request made by me, your security buddy 🤖.
Note that this summary is auto-generated and not meant to be a definitive list of security issues
but rather a helpful summary from a security perspective.

Summary:

The changes in this pull request involve updating the version of the gce-proxy image used in the cloudsql section of the Helm chart for the DefectDojo application. Specifically, the image tag has been updated from version 1.35.1 to 1.35.2.

From an application security perspective, this change is relatively minor and does not introduce any significant security concerns. Updating the gce-proxy image to a newer version is generally a good practice, as it may include security fixes or improvements. However, it is always important to carefully review the release notes and change log for the new version to ensure that there are no known security vulnerabilities or breaking changes that could impact the application.

Overall, this change appears to be a routine update to the Helm chart configuration and does not raise any immediate security concerns.

Files Changed:

  • helm/defectdojo/values.yaml: This file has been updated to change the tag value for the gce-proxy image from 1.35.1 to 1.35.2. The gce-proxy image is used to provide integration with Google Cloud SQL, allowing the DefectDojo application to connect to a Google Cloud SQL instance.

Powered by DryRun Security

Copy link
Contributor

@mtesauro mtesauro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved

@cneill cneill merged commit 98a48d4 into dev May 16, 2024
124 checks passed
@renovate renovate bot deleted the renovate/gcr.io-cloudsql-docker-gce-proxy-1.x branch May 16, 2024 17:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file helm
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants