chore(deps): update gcr.io/distroless/java17-debian11 docker digest to 2bb5811 - autoclosed

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
gcr.io/distroless/java17-debian11	final	digest	66dcffe -> 2bb5811

---

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	5		0	0.06s
✅ BASH	bash-exec	4		0	0.04s
✅ BASH	shellcheck	4		0	0.04s
✅ BASH	shfmt	4		0	0.03s
✅ DOCKERFILE	hadolint	1		0	0.12s
✅ GROOVY	npm-groovy-lint	2		0	10.03s
✅ JAVA	checkstyle	38		0	7.19s
✅ JSON	jsonlint	15		0	0.24s
✅ JSON	npm-package-json-lint	yes		no	0.76s
✅ JSON	prettier	15		0	0.71s
✅ JSON	v8r	15		0	27.27s
✅ MARKDOWN	markdownlint	2		0	0.79s
✅ REPOSITORY	checkov	yes		no	15.21s
✅ REPOSITORY	gitleaks	yes		no	0.42s
✅ REPOSITORY	git_diff	yes		no	0.01s
✅ REPOSITORY	grype	yes		no	14.34s
✅ REPOSITORY	kics	yes		no	14.05s
✅ REPOSITORY	secretlint	yes		no	0.88s
✅ REPOSITORY	syft	yes		no	2.32s
✅ REPOSITORY	trivy	yes		no	8.81s
✅ REPOSITORY	trivy-sbom	yes		no	6.85s
✅ REPOSITORY	trufflehog	yes		no	5.99s
✅ XML	xmllint	13		0	0.02s
✅ YAML	prettier	14		0	0.75s
✅ YAML	v8r	14		0	16.24s
✅ YAML	yamllint	14		0	0.62s

See detailed report in MegaLinter reports

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

• oxsecurity/megalinter/flavors/[email protected] (84 linters)

MegaLinter is graciously provided by

[github-actions]

Trivy image scan report

ghcr.io/miracum/obds-to-fhir:pr-27 (debian 11.10)

29 known vulnerabilities found (HIGH: 2 MEDIUM: 6 LOW: 20 CRITICAL: 1)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
libc6	CVE-2023-4806	MEDIUM	2.31-13+deb11u10
libc6	CVE-2023-4813	MEDIUM	2.31-13+deb11u10
libc6	CVE-2010-4756	LOW	2.31-13+deb11u10
libc6	CVE-2018-20796	LOW	2.31-13+deb11u10
libc6	CVE-2019-1010022	LOW	2.31-13+deb11u10
libc6	CVE-2019-1010023	LOW	2.31-13+deb11u10
libc6	CVE-2019-1010024	LOW	2.31-13+deb11u10
libc6	CVE-2019-1010025	LOW	2.31-13+deb11u10
libc6	CVE-2019-9192	LOW	2.31-13+deb11u10
libexpat1	CVE-2023-52425	HIGH	2.2.10-2+deb11u5
libexpat1	CVE-2013-0340	LOW	2.2.10-2+deb11u5
libexpat1	CVE-2023-52426	LOW	2.2.10-2+deb11u5
libexpat1	CVE-2024-28757	LOW	2.2.10-2+deb11u5
libfreetype6	CVE-2022-31782	LOW	2.10.4+dfsg-1+deb11u1
libgcc-s1	CVE-2023-4039	MEDIUM	10.2.1-6
libglib2.0-0	CVE-2012-0039	LOW	2.66.8-1+deb11u4
libharfbuzz0b	CVE-2023-25193	HIGH	2.7.4-1
libharfbuzz0b	CVE-2022-33068	MEDIUM	2.7.4-1
libjpeg62-turbo	CVE-2021-46822	MEDIUM	1:2.0.6-4
libpcre3	CVE-2017-11164	LOW	2:8.39-13
libpcre3	CVE-2017-16231	LOW	2:8.39-13
libpcre3	CVE-2017-7245	LOW	2:8.39-13
libpcre3	CVE-2017-7246	LOW	2:8.39-13
libpcre3	CVE-2019-20838	LOW	2:8.39-13
libpng16-16	CVE-2019-6129	LOW	1.6.37-3
libpng16-16	CVE-2021-4214	LOW	1.6.37-3
libstdc++6	CVE-2023-4039	MEDIUM	10.2.1-6
libuuid1	CVE-2022-0563	LOW	2.36.1-8+deb11u2
zlib1g	CVE-2023-45853	CRITICAL	1:1.2.11.dfsg-2+deb11u2

No Misconfigurations found

Java

5 known vulnerabilities found (LOW: 0 CRITICAL: 0 HIGH: 3 MEDIUM: 2)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
org.apache.tomcat.embed:tomcat-embed-core	CVE-2024-24549	MEDIUM	10.1.18	8.5.99, 9.0.86, 10.1.19, 11.0.0-M17
org.apache.tomcat.embed:tomcat-embed-websocket	CVE-2024-23672	MEDIUM	10.1.18	11.0.0-M17, 10.1.19, 9.0.86, 8.5.99
org.springframework:spring-web	CVE-2024-22243	HIGH	6.1.3	6.1.4, 6.0.17, 5.3.32
org.springframework:spring-web	CVE-2024-22259	HIGH	6.1.3	6.1.5, 6.0.18, 5.3.33
org.springframework:spring-web	CVE-2024-22262	HIGH	6.1.3	5.3.34, 6.0.19, 6.1.6

No Misconfigurations found