fix grpc-health-probe flagged by trivy

Due to CVE GHSA-m425-mq94-257g There hasn't been any grpc-health-probe release with the fix, so this builds at the specific commit that includes a version bump for the affected dependency grpc-ecosystem/grpc-health-probe@25cbb49
authzed · Oct 26, 2023 · 2f912a1 · 2f912a1
1 parent 9768443
commit 2f912a1
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -9,7 +9,7 @@ WORKDIR /go/src/app
 RUN apk update && apk add --no-cache git
 RUN git clone https://github.com/grpc-ecosystem/grpc-health-probe.git
 WORKDIR /go/src/app/grpc-health-probe
-RUN git checkout v0.4.21
+RUN git checkout 25cbb49
 RUN CGO_ENABLED=0 go install -a -tags netgo -ldflags=-w
 
 FROM cgr.dev/chainguard/static:latest

diff --git a/Dockerfile.release b/Dockerfile.release
@@ -6,7 +6,7 @@ WORKDIR /go/src/app
 RUN apk update && apk add --no-cache git
 RUN git clone https://github.com/grpc-ecosystem/grpc-health-probe.git
 WORKDIR /go/src/app/grpc-health-probe
-RUN git checkout v0.4.21
+RUN git checkout 25cbb49
 RUN CGO_ENABLED=0 go install -a -tags netgo -ldflags=-w
 
 FROM $BASE