Merge pull request #319 from CybercentreCanada/CVE-2024-6345

Update setuptools to the latest version in the root image
CybercentreCanada · Feb 11, 2025 · 4a51714 · 4a51714
2 parents d7d25a2 + 5077522
commit 4a51714
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/pipelines/ui-config.yaml b/pipelines/ui-config.yaml
@@ -44,5 +44,11 @@ submission:
           validator_type: keyword
     strict_schemes:
       - strict_ingest
+  profiles:
+    # Profile that will enforce metadata validation
+    - name: "static"
+      display_name: "Static Analysis"
+      params:
+        type: strict_ingest
 ui:
   enforce_quota: false
diff --git a/root-image/common.Dockerfile b/root-image/common.Dockerfile
@@ -7,3 +7,6 @@ RUN apt-get update && apt-get -yy upgrade && rm -rf /var/lib/apt/lists/*
 RUN apt-get update \
   && apt-get install -yy libffi8 libfuzzy2 libmagic1 git\
   && rm -rf /var/lib/apt/lists/*
+
+# Update setuptools package
+pip install -U setuptools