Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update docker images to reduce security vulnerabilities #211

Draft
wants to merge 15 commits into
base: main
Choose a base branch
from
Draft

Update docker images to reduce security vulnerabilities #211

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
aea60aa
chore: bump python version
adthrasher Jan 31, 2025
8d66aef
chore: debian -> alpine
adthrasher Jan 31, 2025
c8cf0e4
chore: upgrade python and switch to alpine
adthrasher Jan 31, 2025
07f6292
chore: debian -> alpine
adthrasher Jan 31, 2025
7ce213c
chore: r-base -> r-minimal
adthrasher Jan 31, 2025
3e4f3d0
chore: update R
adthrasher Jan 31, 2025
1147dbf
chore: upgrade ubuntu
adthrasher Jan 31, 2025
fe2a5bc
chore: set snyk severity to high. fix: add --paginate to gh api call
adthrasher Jan 31, 2025
34f9ce3
chore: revert severity filter
adthrasher Jan 31, 2025
f38823d
chore: upgrade vulnerable packages
adthrasher Jan 31, 2025
5deaa18
chore: bump docker versions
adthrasher Jan 31, 2025
e0f765d
chore: bump images and point to branch build
adthrasher Jan 31, 2025
b1060a6
chore: try adding bash to alpine
adthrasher Jan 31, 2025
54dc314
chore: call scripts directly
adthrasher Jan 31, 2025
bf36c7d
chore: add --verbose flag to tests
adthrasher Jan 31, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/docker-clean.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,7 @@ jobs:
run: | # NOTE: This will delete any images for branch names that contain the current branch name as a prefix.
REF="${{ github.event.ref }}"
REF="${REF##*/}"
gh api /orgs/${{ github.repository_owner }}/packages/container/${{ env.TOOL }}/versions | jq -r '.[] | select(isempty(.metadata.container.tags[]) or (.metadata.container.tags[] | contains("branch-${REF}"))) | .id' > versions.txt
gh api --paginate /orgs/${{ github.repository_owner }}/packages/container/${{ env.TOOL }}/versions | jq -r '.[] | select(isempty(.metadata.container.tags[]) or (.metadata.container.tags[] | contains("branch-${REF}"))) | .id' > versions.txt
echo "IDS=$(tr -s '\n' ',' < versions.txt | sed 's/,$//')" >> $GITHUB_ENV
- uses: actions/delete-package-versions@v5
with:
Expand Down
2 changes: 1 addition & 1 deletion data_structures/flag_filter.wdl
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -118,7 +118,7 @@ task validate_string_is_12bit_oct_dec_or_hex {
runtime {
memory: "4 GB"
disks: "10 GB"
container: "ghcr.io/stjudecloud/util:1.5.1"
container: "ghcr.io/stjudecloud/util:branch-update_images-2.0.0"
maxRetries: 1
}
}
Expand Down
4 changes: 2 additions & 2 deletions data_structures/read_group.wdl
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -104,7 +104,7 @@ task read_group_to_string {
runtime {
memory: "4 GB"
disks: "10 GB"
container: "ghcr.io/stjudecloud/util:1.5.1"
container: "ghcr.io/stjudecloud/util:branch-update_images-2.0.0"
maxRetries: 1
}
}
Expand Down Expand Up @@ -441,7 +441,7 @@ task validate_read_group {
runtime {
memory: "4 GB"
disks: "10 GB"
container: "ghcr.io/stjudecloud/util:1.5.1"
container: "ghcr.io/stjudecloud/util:branch-update_images-2.0.0"
maxRetries: 0
}
}
4 changes: 3 additions & 1 deletion docker/estimate/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,5 @@
FROM r-base:4.0.3
FROM ghcr.io/r-hub/r-minimal/r-minimal:4.4.2

Fixed Show fixed Hide fixed
Fixed Show fixed Hide fixed
Fixed Show fixed Hide fixed
Fixed Show fixed Hide fixed
RUN apk upgrade --no-cache

RUN R -e 'install.packages("estimate", repos="http://r-forge.r-project.org", dependencies=TRUE)'
2 changes: 1 addition & 1 deletion docker/estimate/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
{
"name": "estimate",
"version": "1.1.1"
"version": "2.0.0"
}
4 changes: 3 additions & 1 deletion docker/python-plotting/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,6 @@
FROM python:3.13.0
FROM python:3.13.1-alpine

RUN apk add --no-cache bash

RUN pip install pandas numpy matplotlib seaborn plotly

Expand Down
2 changes: 1 addition & 1 deletion docker/python-plotting/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
{
"name": "python-plotting",
"version": "1.2.1"
"version": "2.0.0"
}
7 changes: 6 additions & 1 deletion docker/umap/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
FROM python:3.12.7
FROM python:3.13.1-alpine

# Downstream requires llvm15, but that is out-of-date
# llvm15 installs with the -15 suffix, so we need to symlink
RUN apk add --no-cache build-base llvm15-dev bash \
&& ln -s /usr/bin/llvm-config-15 /usr/bin/llvm-config

RUN pip install umap-learn==0.5.7 pandas

Expand Down
2 changes: 1 addition & 1 deletion docker/umap/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
{
"name": "umap",
"version": "0.5.7",
"revision": "3"
"revision": "4"
}
9 changes: 5 additions & 4 deletions docker/util/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,8 @@
FROM ubuntu:22.04
FROM ubuntu:24.04

Check warning

Code scanning / Snyk Container

Low severity - Allocation of Resources Without Limits or Throttling vulnerability in binutils Medium

This file introduces a vulnerable binutils package with a low severity vulnerability.

Check warning

Code scanning / Snyk Container

Low severity - Improper Input Validation vulnerability in coreutils Medium

This file introduces a vulnerable coreutils package with a low severity vulnerability.

Check warning

Code scanning / Snyk Container

Medium severity - Integer Overflow or Wraparound vulnerability in freetype Medium

This file introduces a vulnerable freetype package with a medium severity vulnerability.

Check failure

Code scanning / Snyk Container

Low severity - Allocation of Resources Without Limits or Throttling vulnerability in glibc High

This file introduces a vulnerable glibc package with a low severity vulnerability.

Check notice

Code scanning / Snyk Container

Low severity - Out-of-bounds Write vulnerability in gnupg2 Low

This file introduces a vulnerable gnupg2 package with a low severity vulnerability.

Check warning

Code scanning / Snyk Container

Low severity - Race Condition vulnerability in htslib Medium

This file introduces a vulnerable htslib package with a low severity vulnerability.

Check notice

Code scanning / Snyk Container

Low severity - CVE-2024-26458 vulnerability in krb5 Note

This file introduces a vulnerable krb5 package with a low severity vulnerability.

Check warning

Code scanning / Snyk Container

Medium severity - CVE-2024-26462 vulnerability in krb5 Warning

This file introduces a vulnerable krb5 package with a medium severity vulnerability.

Check notice

Code scanning / Snyk Container

Low severity - CVE-2024-26461 vulnerability in krb5 Note

This file introduces a vulnerable krb5 package with a low severity vulnerability.

Check warning

Code scanning / Snyk Container

Medium severity - CVE-2024-38949 vulnerability in libde265 Warning

This file introduces a vulnerable libde265 package with a medium severity vulnerability.

Check warning

Code scanning / Snyk Container

Medium severity - CVE-2024-38950 vulnerability in libde265 Warning

This file introduces a vulnerable libde265 package with a medium severity vulnerability.

Check notice

Code scanning / Snyk Container

Low severity - Information Exposure vulnerability in libgcrypt20 Note

This file introduces a vulnerable libgcrypt20 package with a low severity vulnerability.

Check warning

Code scanning / Snyk Container

Low severity - NULL Pointer Dereference vulnerability in libpng1.6 Medium

This file introduces a vulnerable libpng1.6 package with a low severity vulnerability.

Check warning

Code scanning / Snyk Container

Low severity - Allocation of Resources Without Limits or Throttling vulnerability in openjpeg2 Medium

This file introduces a vulnerable openjpeg2 package with a low severity vulnerability.

Check warning

Code scanning / Snyk Container

Medium severity - Resource Exhaustion vulnerability in openjpeg2 Warning

This file introduces a vulnerable openjpeg2 package with a medium severity vulnerability.

Check warning

Code scanning / Snyk Container

Medium severity - Resource Exhaustion vulnerability in openjpeg2 Warning

This file introduces a vulnerable openjpeg2 package with a medium severity vulnerability.

Check notice

Code scanning / Snyk Container

Low severity - CVE-2024-41996 vulnerability in openssl Note

This file introduces a vulnerable openssl package with a low severity vulnerability.

Check warning

Code scanning / Snyk Container

Medium severity - Insecure Storage of Sensitive Information vulnerability in pam Medium

This file introduces a vulnerable pam package with a medium severity vulnerability.

Check failure

Code scanning / Snyk Container

Medium severity - Improper Authentication vulnerability in pam High

This file introduces a vulnerable pam package with a medium severity vulnerability.

Check warning

Code scanning / Snyk Container

Low severity - Release of Invalid Pointer or Reference vulnerability in patch Medium

This file introduces a vulnerable patch package with a low severity vulnerability.

Check failure

Code scanning / Snyk Container

Low severity - Double Free vulnerability in patch High

This file introduces a vulnerable patch package with a low severity vulnerability.

Check warning

Code scanning / Snyk Container

Medium severity - CVE-2024-35195 vulnerability in python-pip Warning

This file introduces a vulnerable python-pip package with a medium severity vulnerability.

Check warning

Code scanning / Snyk Container

Medium severity - CVE-2024-56433 vulnerability in shadow Warning

This file introduces a vulnerable shadow package with a medium severity vulnerability.

Check notice

Code scanning / Snyk Container

Low severity - CVE-2024-6716 vulnerability in tiff Note

This file introduces a vulnerable tiff package with a low severity vulnerability.

Check warning

Code scanning / Snyk Container

Medium severity - Open Redirect vulnerability in wget Medium

This file introduces a vulnerable wget package with a medium severity vulnerability.

RUN apt-get update \
&& apt-get upgrade -y \
&& apt-get install wget zip gcc zlib1g-dev libbz2-dev liblzma-dev jq python3 python3-pip parallel -y \
&& rm -r /var/lib/apt/lists/* \
&& python3 -m pip --no-cache-dir install csvkit pysam
&& apt-get install wget zip gcc zlib1g-dev libbz2-dev \
liblzma-dev jq python3 python3-pip parallel \
python3-csvkit python3-pysam -y \
&& rm -r /var/lib/apt/lists/*
2 changes: 1 addition & 1 deletion docker/util/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
{
"name": "util",
"version": "1.5.1"
"version": "2.0.0"
}
8 changes: 4 additions & 4 deletions tests/tools/test_arriba.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
- miniwdl
- arriba
command: >-
miniwdl run -d test-output/. --task arriba -i tests/tools/input_json/arriba.json tools/arriba.wdl
miniwdl run --verbose -d test-output/. --task arriba -i tests/tools/input_json/arriba.json tools/arriba.wdl
files:
- path: test-output/out/fusions/fusions.tsv
- path: test-output/out/discarded_fusions/fusions.discarded.tsv
Expand All @@ -13,7 +13,7 @@
- miniwdl
- arriba
command: >-
miniwdl run -d test-output/. --task arriba_tsv_to_vcf tools/arriba.wdl fusions="tests/input/fusions.tsv" reference_fasta="tests/input/GRCh38.chr9_chr22.fa.gz"
miniwdl run --verbose -d test-output/. --task arriba_tsv_to_vcf tools/arriba.wdl fusions="tests/input/fusions.tsv" reference_fasta="tests/input/GRCh38.chr9_chr22.fa.gz"
files:
- path: test-output/out/fusions_vcf/fusions.vcf

Expand All @@ -22,7 +22,7 @@
- miniwdl
- arriba
command: >-
miniwdl run -d test-output/. --task arriba_extract_fusion_supporting_alignments tools/arriba.wdl fusions="tests/input/fusions.tsv" bam="tests/input/Aligned.sortedByCoord.chr9_chr22.bam" bam_index="tests/input/Aligned.sortedByCoord.chr9_chr22.bam.bai"
miniwdl run --verbose -d test-output/. --task arriba_extract_fusion_supporting_alignments tools/arriba.wdl fusions="tests/input/fusions.tsv" bam="tests/input/Aligned.sortedByCoord.chr9_chr22.bam" bam_index="tests/input/Aligned.sortedByCoord.chr9_chr22.bam.bai"
files:
- path: test-output/out/fusion_bams/0/fusions_1.bam

Expand All @@ -31,6 +31,6 @@
- miniwdl
- arriba
command: >-
miniwdl run -d test-output/. --task arriba_annotate_exon_numbers tools/arriba.wdl fusions="tests/input/fusions.tsv" gtf="tests/input/gencode.v31.chr9_chr22.gtf.gz"
miniwdl run --verbose -d test-output/. --task arriba_annotate_exon_numbers tools/arriba.wdl fusions="tests/input/fusions.tsv" gtf="tests/input/gencode.v31.chr9_chr22.gtf.gz"
files:
- path: test-output/out/fusion_tsv/fusions.annotated.tsv
6 changes: 3 additions & 3 deletions tests/tools/test_picard.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -121,7 +121,7 @@
- miniwdl
- picard
command: >-
miniwdl run -d test-output/. --task merge_vcfs -i tests/tools/input_json/picard_merge_vcfs.json tools/picard.wdl
miniwdl run --verbose -d test-output/. --task merge_vcfs -i tests/tools/input_json/picard_merge_vcfs.json tools/picard.wdl
files:
- path: test-output/out/merged_vcf/test.vcf.gz

Expand All @@ -130,7 +130,7 @@
- miniwdl
- picard
command: >-
miniwdl run -d test-output/. --task scatter_interval_list tools/picard.wdl interval_list="tests/input/wgs_calling_regions.hg38.interval_list" scatter_count=3
miniwdl run --verbose -d test-output/. --task scatter_interval_list tools/picard.wdl interval_list="tests/input/wgs_calling_regions.hg38.interval_list" scatter_count=3
files:
- path: test-output/out/interval_lists_scatter/0/1scattered.interval_list
- path: test-output/out/interval_lists_scatter/1/2scattered.interval_list
Expand All @@ -141,6 +141,6 @@
- miniwdl
- picard
command: >-
miniwdl run -d test-output/. --task create_sequence_dictionary tools/picard.wdl fasta="tests/input/GRCh38.chrY_chrM.fa" outfile_name="GRCh38.chrY_chrM.dict"
miniwdl run --verbose -d test-output/. --task create_sequence_dictionary tools/picard.wdl fasta="tests/input/GRCh38.chrY_chrM.fa" outfile_name="GRCh38.chrY_chrM.dict"
files:
- path: test-output/out/dictionary/GRCh38.chrY_chrM.dict
10 changes: 5 additions & 5 deletions tests/tools/test_sambamba.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
- miniwdl
- sambamba
command: >-
miniwdl run -d test-output/. --task index tools/sambamba.wdl bam="tests/input/test.bwa_aln_pe.chrY_chrM.bam"
miniwdl run --verbose -d test-output/. --task index tools/sambamba.wdl bam="tests/input/test.bwa_aln_pe.chrY_chrM.bam"
files:
- path: test-output/out/bam_index/test.bwa_aln_pe.chrY_chrM.bam.bai

Expand All @@ -12,7 +12,7 @@
- miniwdl
- sambamba
command: >-
miniwdl run -d test-output/. --task merge -i tests/tools/input_json/sambamba_merge.json tools/sambamba.wdl
miniwdl run --verbose -d test-output/. --task merge -i tests/tools/input_json/sambamba_merge.json tools/sambamba.wdl
files:
- path: test-output/out/merged_bam/test.bam

Expand All @@ -21,7 +21,7 @@
- miniwdl
- sambamba
command: >-
miniwdl run -d test-output/. --task sort tools/sambamba.wdl bam="tests/input/test.bwa_aln_pe.chrY_chrM.bam"
miniwdl run --verbose -d test-output/. --task sort tools/sambamba.wdl bam="tests/input/test.bwa_aln_pe.chrY_chrM.bam"
files:
- path: test-output/out/sorted_bam/test.bwa_aln_pe.chrY_chrM.sorted.bam

Expand All @@ -30,7 +30,7 @@
- miniwdl
- sambamba
command: >-
miniwdl run -d test-output/. --task flagstat tools/sambamba.wdl bam="tests/input/test.bwa_aln_pe.chrY_chrM.bam"
miniwdl run --verbose -d test-output/. --task flagstat tools/sambamba.wdl bam="tests/input/test.bwa_aln_pe.chrY_chrM.bam"
files:
- path: test-output/out/flagstat_report/test.bwa_aln_pe.chrY_chrM.flagstat.txt

Expand All @@ -39,7 +39,7 @@
- miniwdl
- sambamba
command: >-
miniwdl run -d test-output/. --task markdup tools/sambamba.wdl bam="tests/input/test.bwa_aln_pe.chrY_chrM.bam"
miniwdl run --verbose -d test-output/. --task markdup tools/sambamba.wdl bam="tests/input/test.bwa_aln_pe.chrY_chrM.bam"
files:
- path: test-output/out/duplicate_marked_bam/test.bwa_aln_pe.chrY_chrM.markdup.bam
- path: test-output/out/duplicate_marked_bam_index/test.bwa_aln_pe.chrY_chrM.markdup.bam.bai
Expand Down
2 changes: 1 addition & 1 deletion tests/tools/test_samtools.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -110,6 +110,6 @@
- miniwdl
- samtools
command: >-
miniwdl run -d test-output/. --task faidx tools/samtools.wdl fasta="tests/input/test.fa"
miniwdl run --verbose -d test-output/. --task faidx tools/samtools.wdl fasta="tests/input/test.fa"
files:
- path: test-output/out/fasta_index/test.fa.fai
2 changes: 1 addition & 1 deletion tests/tools/test_util.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -128,6 +128,6 @@
- miniwdl
- util
command: >-
miniwdl run -d test-output/. --task split_fastq tools/util.wdl fastq="tests/input/test_R1.fq.gz" prefix="test.R1."
miniwdl run --verbose -d test-output/. --task split_fastq tools/util.wdl fastq="tests/input/test_R1.fq.gz" prefix="test.R1."
files:
- path: "test-output/out/fastqs/0/test.R1.000000.fastq.gz"
8 changes: 4 additions & 4 deletions tests/workflows/test-methylation-cohort.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
- miniwdl
- methylation
command: >-
miniwdl run -d test-output/. --task combine_data -i tests/workflows/input_json/combine_data.json workflows/methylation/methylation-cohort.wdl
miniwdl run --verbose -d test-output/. --task combine_data -i tests/workflows/input_json/combine_data.json workflows/methylation/methylation-cohort.wdl
files:
- path: test-output/out/combined_beta/combined_beta.csv

Expand All @@ -12,7 +12,7 @@
- miniwdl
- methylation
command: >-
miniwdl run -d test-output/. --task filter_probes -i tests/workflows/input_json/filter_probes.json workflows/methylation/methylation-cohort.wdl
miniwdl run --verbose -d test-output/. --task filter_probes -i tests/workflows/input_json/filter_probes.json workflows/methylation/methylation-cohort.wdl
files:
- path: test-output/out/filtered_beta_values/filtered.beta.csv
- path: test-output/out/filtered_probes/filtered.probes.csv
Expand All @@ -22,7 +22,7 @@
- miniwdl
- methylation
command: >-
miniwdl run -d test-output/. --task generate_umap -i tests/workflows/input_json/generate_umap.json workflows/methylation/methylation-cohort.wdl
miniwdl run --verbose -d test-output/. --task generate_umap -i tests/workflows/input_json/generate_umap.json workflows/methylation/methylation-cohort.wdl
files:
- path: test-output/out/umap/umap.csv

Expand All @@ -31,6 +31,6 @@
- miniwdl
- methylation
command: >-
miniwdl run -d test-output/. --task plot_umap -i tests/workflows/input_json/plot_umap.json workflows/methylation/methylation-cohort.wdl
miniwdl run --verbose -d test-output/. --task plot_umap -i tests/workflows/input_json/plot_umap.json workflows/methylation/methylation-cohort.wdl
files:
- path: test-output/out/umap_plot/umap.png
2 changes: 1 addition & 1 deletion tests/workflows/test-methylation-preprocess.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
- miniwdl
- methylation
command: >-
miniwdl run -d test-output/. --task process_raw_idats -i tests/workflows/input_json/process_raw_idats.json workflows/methylation/methylation-preprocess.wdl
miniwdl run --verbose -d test-output/. --task process_raw_idats -i tests/workflows/input_json/process_raw_idats.json workflows/methylation/methylation-preprocess.wdl
files:
- path: test-output/out/beta_swan_norm_unfiltered/201533520001_R03C01.beta_swan_norm_unfiltered.csv
- path: test-output/out/beta_swan_norm_unfiltered_genomic/201533520001_R03C01.beta_swan_norm_unfiltered.genomic.csv
Expand Down
8 changes: 4 additions & 4 deletions tools/bwa.wdl
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -86,7 +86,7 @@ task bwa_aln {
cpu: ncpu
memory: "5 GB"
disks: "~{disk_size_gb} GB"
container: "ghcr.io/stjudecloud/bwa:0.7.17-2"
container: "ghcr.io/stjudecloud/bwa:branch-update_images-0.7.17-2"
maxRetries: 1
}
}
Expand Down Expand Up @@ -187,7 +187,7 @@ task bwa_aln_pe {
cpu: ncpu
memory: "17 GB"
disks: "~{disk_size_gb} GB"
container: "ghcr.io/stjudecloud/bwa:0.7.17-2"
container: "ghcr.io/stjudecloud/bwa:branch-update_images-0.7.17-2"
maxRetries: 1
}
}
Expand Down Expand Up @@ -283,7 +283,7 @@ task bwa_mem {
cpu: ncpu
memory: "25 GB"
disks: "~{disk_size_gb} GB"
container: "ghcr.io/stjudecloud/bwa:0.7.17-2"
container: "ghcr.io/stjudecloud/bwa:branch-update_images-0.7.17-2"
maxRetries: 1
}
}
Expand Down Expand Up @@ -334,7 +334,7 @@ task build_bwa_db {
runtime {
memory: "5 GB"
disks: "~{disk_size_gb} GB"
container: "ghcr.io/stjudecloud/bwa:0.7.17-2"
container: "ghcr.io/stjudecloud/bwa:branch-update_images-0.7.17-2"
maxRetries: 1
}
}
2 changes: 1 addition & 1 deletion tools/estimate.wdl
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -51,7 +51,7 @@ task run_estimate {
runtime {
memory: "~{memory_gb} GB"
disks: "~{disk_size_gb} GB"
container: "ghcr.io/stjudecloud/estimate:1.1.1"
container: "ghcr.io/stjudecloud/estimate:branch-update_images-2.0.0"
maxRetries: max_retries
}
}
2 changes: 1 addition & 1 deletion tools/htseq.wdl
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -209,7 +209,7 @@ task calc_tpm {
runtime {
memory: "4 GB"
disks: "10 GB"
container: "ghcr.io/stjudecloud/util:1.5.1"
container: "ghcr.io/stjudecloud/util:branch-update_images-2.0.0"
maxRetries: 1
}
}
2 changes: 1 addition & 1 deletion tools/md5sum.wdl
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ task compute_checksum {
runtime {
memory: "4 GB"
disks: "~{disk_size_gb} GB"
container: "ghcr.io/stjudecloud/util:1.5.1"
container: "ghcr.io/stjudecloud/util:branch-update_images-2.0.0"
maxRetries: 1
}
}
4 changes: 2 additions & 2 deletions tools/star.wdl
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -127,7 +127,7 @@ task build_star_db {
cpu: ncpu
memory: "~{memory_gb} GB"
disks: "~{disk_size_gb} GB"
container: "ghcr.io/stjudecloud/star:2.7.11b-5"
container: "ghcr.io/stjudecloud/star:branch-update_images-2.7.11b-5"
maxRetries: 1
}
}
Expand Down Expand Up @@ -833,7 +833,7 @@ task alignment {
cpu: ncpu
memory: "50 GB"
disks: "~{disk_size_gb} GB"
container: "ghcr.io/stjudecloud/star:2.7.11b-5"
container: "ghcr.io/stjudecloud/star:branch-update_images-2.7.11b-5"
maxRetries: 1
}
}
Expand Down
Loading
Loading