Feature - Move from alpine to debian image

.github/workflows/trivy-analysis.yml

@@ -33,15 +33,14 @@ jobs:
           DOCKER_BUILDKIT=1 docker build -t cloudharness-base:${{ github.sha }} . -f ./infrastructure/base-images/cloudharness-base/Dockerfile
 
       - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@2a2157eb22c08c9a1fac99263430307b8d1bc7a2
+        uses: aquasecurity/trivy-action@master
         with:
           image-ref: 'cloudharness-base:${{ github.sha }}'
-          format: 'template'
-          template: '@/contrib/sarif.tpl'
+          format: 'sarif'
           output: 'trivy-results.sarif'
           severity: 'CRITICAL,HIGH'
 
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v1
+        uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: 'trivy-results.sarif'

.gitignore

@@ -22,5 +22,7 @@ skaffold.yaml
 .hypothesis
 __pycache__
 .env
+tools/deployment-cli-tools/tests/resources/migration
+tools/deployment-cli-tools/tests/resources/migration.bak
 /.venv
-.history
+.history

applications/common/server/Dockerfile

@@ -6,8 +6,7 @@ ENV MODULE_NAME=common
 
 ENV WORKERS=2
 ENV PORT=8080
-RUN apk update
-RUN apk add postgresql-dev
+RUN apt update && apt install -y postgresql
 
 COPY ./requirements.txt /usr/src/app/
 
@@ -18,4 +17,4 @@ COPY . /usr/src/app
 ENV FLASK_ENV=production
 ENV APP_SETTINGS=common.config.ProductionConfig
 RUN pip3 install -e /usr/src/app
-ENTRYPOINT gunicorn --workers=$WORKERS --bind=0.0.0.0:$PORT $MODULE_NAME.__main__:app
+ENTRYPOINT gunicorn --workers=$WORKERS --bind=0.0.0.0:$PORT $MODULE_NAME.__main__:app

applications/workflows/tasks/extract-download/Dockerfile

@@ -1,6 +1,6 @@
-FROM alpine
-RUN apk update
-RUN apk add file unzip wget
+ARG CLOUDHARNESS_BASE
+FROM $CLOUDHARNESS_BASE as base
+RUN apt update && apt install -y file unzip wget
 
 ADD . /