chore(deps): update redis docker tag from 7.2.4 to v7.2.5 (docker-compose.yml)

[renovate]

This PR contains the following updates:

Package	Update	Change
redis	patch	7.2.4-alpine -> 7.2.5-alpine

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[dryrunsecurity]

Hi there 👋, @DryRunSecurity here, below is a summary of our analysis and findings.

DryRun Security	Status	Findings
Configured Codepaths Analyzer	✅	0 findings
Sensitive Files Analyzer	✅	0 findings
AppSec Analyzer	✅	0 findings
Authn/Authz Analyzer	✅	0 findings
Secrets Analyzer	✅	0 findings

Note

🟢 Risk threshold not exceeded.

Change Summary (click to expand)

The following is a summary of changes in this pull request made by me, your security buddy 🤖. Note that this summary is auto-generated and not meant to be a definitive list of security issues but rather a helpful summary from a security perspective.

Summary:

The provided code change is an update to the docker-compose.yml file, which is used to deploy the DefectDojo application in a containerized environment. The key change is the update to the Redis container image from version 7.2.4-alpine to 7.2.5-alpine. From an application security perspective, this update is a positive security practice, as it ensures that the application is running on the latest stable and secure versions of its components, reducing the risk of known vulnerabilities. Additionally, the use of specific image digests for both the Redis and MySQL containers helps ensure the integrity of the container images, and the proper management of sensitive environment variables and persistent volumes are crucial for maintaining the overall security of the deployed application. The various entrypoint scripts used in the deployment process should also be reviewed for any potential security issues.

Files Changed:

• docker-compose.yml: This file has been updated to use the latest version of the Redis container image (7.2.5-alpine) and to specify the exact image digests for both the Redis and MySQL containers. The file also configures various environment variables, volume mounts, and entrypoint scripts for managing the deployment of the DefectDojo application in a containerized environment.

Powered by DryRun Security

[mtesauro]

Approved