Upgrade python version (#2312)

* Upgrade python version * cspell * [MegaLinter] Apply linters fixes * Upgrade dart & glibc versions Workaround for sgerrand/alpine-pkg-glibc#185 * Update used by * Build * Do not try to upgrade dartanalyzer * checkov config --------- Co-authored-by: nvuillam <nvuillam@users.noreply.github.com>
oxsecurity · Feb 6, 2023 · 367e77c · 367e77c
1 parent a04bd73
commit 367e77c
Show file tree

Hide file tree

Showing 48 changed files with 59 additions and 49 deletions.
diff --git a/.automation/build.py b/.automation/build.py
@@ -2292,7 +2292,7 @@ def finalize_doc_build():
 [![Docker Pulls](https://img.shields.io/badge/docker%20pulls-4.0M-blue?color=%23FD80CD)](https://megalinter.github.io/flavors/)
 [![Downloads/week](https://img.shields.io/npm/dw/mega-linter-runner.svg?color=%23FD80CD)](https://npmjs.org/package/mega-linter-runner)
 [![GitHub stars](https://img.shields.io/github/stars/oxsecurity/megalinter?cacheSeconds=3600&color=%23FD80CD)](https://github.com/oxsecurity/megalinter/stargazers/)
-[![Dependents](https://img.shields.io/static/v1?label=Used%20by&message=1690&color=%23FD80CD&logo=slickpic)](https://github.com/oxsecurity/megalinter/network/dependents)
+[![Dependents](https://img.shields.io/static/v1?label=Used%20by&message=2011&color=%23FD80CD&logo=slickpic)](https://github.com/oxsecurity/megalinter/network/dependents)
 [![GitHub contributors](https://img.shields.io/github/contributors/oxsecurity/megalinter.svg?color=%23FD80CD)](https://github.com/oxsecurity/megalinter/graphs/contributors/)
 [![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg?style=flat-square&color=%23FD80CD)](http://makeapullrequest.com)""",  # noqa: E501
     )

diff --git a/.github/linters/.checkov.yml b/.github/linters/.checkov.yml
@@ -6,3 +6,4 @@ skip-check:
   - CKV_DOCKER_3
   - CKV_DOCKER_7
   - CKV_GHA_2
+  - CKV2_GHA_1
diff --git a/.github/linters/.cspell.json b/.github/linters/.cspell.json
@@ -104,6 +104,7 @@
         "DRMAA",
         "DTDs",
         "DUSTILOCK",
+        "Deneuve",
         "Dependabot",
         "Detekt",
         "Devcontainer",
@@ -123,6 +124,7 @@
         "Ekubernetes",
         "Emegalinter",
         "Envir",
+        "Etienne",
         "Excpt",
         "FATA",
         "FILEIO",
@@ -190,6 +192,7 @@
         "LINTR",
         "LOCALFOLDER",
         "LUACHECK",
+        "Laven",
         "Lfiles",
         "Libxml",
         "Lintr",
@@ -522,6 +525,7 @@
         "customrules",
         "cyclomatic",
         "dartanalyzer",
+        "davidjeddy",
         "debugent",
         "decamelize",
         "dedup",
@@ -678,6 +682,7 @@
         "goodcheck",
         "goodwithtech",
         "gosec",
+        "gotit",
         "govet",
         "gridftp",
         "grimmjo",
@@ -778,7 +783,6 @@
         "kxdddddddoc",
         "lacheck",
         "langserver",
-        "Laven",
         "leavevmode",
         "leveldb",
         "levn",
@@ -995,6 +999,7 @@
         "pipeverb",
         "pipfile",
         "pipvenv",
+        "pjungermann",
         "pkgs",
         "plone",
         "pluggable",

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -8,6 +8,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 Note: Can be used with `oxsecurity/megalinter@beta` in your GitHub Action mega-linter.yml file, or with `oxsecurity/megalinter:beta` docker image
 
+- Core
+  - Upgrade base docker image from python:3.10.4-alpine3.16 to python:3.11.1-alpine3.17
+
 - Linter versions upgrades
   - [golangci-lint](https://golangci-lint.run/) from 1.51.0 to **1.51.1** on 2023-02-06
   - [cspell](https://github.com/streetsidesoftware/cspell/tree/master/packages/cspell) from 6.21.0 to **6.22.0** on 2023-02-06

diff --git a/Dockerfile b/Dockerfile
@@ -27,7 +27,7 @@ FROM checkmarx/kics:alpine as kics
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
@@ -42,7 +42,7 @@ ARG BICEP_EXE='bicep'
 ARG BICEP_URI='https://github.com/Azure/bicep/releases/latest/download/bicep-linux-musl-x64'
 ARG BICEP_DIR='/usr/local/bin'
 ARG DART_VERSION='2.8.4'
-ARG GLIBC_VERSION='2.31-r0'
+ARG GLIBC_VERSION='2.34-r0'
 ARG PMD_VERSION=6.48.0
 ARG PSSA_VERSION='latest'
 #ARG__END
@@ -410,7 +410,7 @@ RUN curl --retry 5 --retry-delay 5 -sLO "${ARM_TTK_URI}" \
 # dartanalyzer installation
     && wget --tries=50 -q -O /etc/apk/keys/sgerrand.rsa.pub https://alpine-pkgs.sgerrand.com/sgerrand.rsa.pub \
     && wget --tries=5 -q https://github.com/sgerrand/alpine-pkg-glibc/releases/download/${GLIBC_VERSION}/glibc-${GLIBC_VERSION}.apk \
-    && apk add --no-cache glibc-${GLIBC_VERSION}.apk && rm glibc-${GLIBC_VERSION}.apk \
+    && apk add --force-overwrite --no-cache glibc-${GLIBC_VERSION}.apk && rm glibc-${GLIBC_VERSION}.apk \
     && wget --tries=5 https://storage.googleapis.com/dart-archive/channels/stable/release/${DART_VERSION}/sdk/dartsdk-linux-x64-release.zip -O - -q | unzip -q - \
     && chmod +x dart-sdk/bin/dart* \
     && mv dart-sdk/bin/* /usr/bin/ && mv dart-sdk/lib/* /usr/lib/ && mv dart-sdk/include/* /usr/include/ \

diff --git a/flavors/ci_light/Dockerfile b/flavors/ci_light/Dockerfile
@@ -20,7 +20,7 @@ FROM zricethezav/gitleaks:v8.15.3 as gitleaks
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/flavors/cupcake/Dockerfile b/flavors/cupcake/Dockerfile
@@ -26,7 +26,7 @@ FROM checkmarx/kics:alpine as kics
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/flavors/documentation/Dockerfile b/flavors/documentation/Dockerfile
@@ -22,7 +22,7 @@ FROM zricethezav/gitleaks:v8.15.3 as gitleaks
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/flavors/dotnet/Dockerfile b/flavors/dotnet/Dockerfile
@@ -22,7 +22,7 @@ FROM zricethezav/gitleaks:v8.15.3 as gitleaks
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/flavors/go/Dockerfile b/flavors/go/Dockerfile
@@ -22,7 +22,7 @@ FROM zricethezav/gitleaks:v8.15.3 as gitleaks
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/flavors/java/Dockerfile b/flavors/java/Dockerfile
@@ -23,7 +23,7 @@ FROM zricethezav/gitleaks:v8.15.3 as gitleaks
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/flavors/javascript/Dockerfile b/flavors/javascript/Dockerfile
@@ -22,7 +22,7 @@ FROM zricethezav/gitleaks:v8.15.3 as gitleaks
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/flavors/php/Dockerfile b/flavors/php/Dockerfile
@@ -22,7 +22,7 @@ FROM zricethezav/gitleaks:v8.15.3 as gitleaks
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/flavors/python/Dockerfile b/flavors/python/Dockerfile
@@ -22,7 +22,7 @@ FROM zricethezav/gitleaks:v8.15.3 as gitleaks
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/flavors/ruby/Dockerfile b/flavors/ruby/Dockerfile
@@ -22,7 +22,7 @@ FROM zricethezav/gitleaks:v8.15.3 as gitleaks
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/flavors/rust/Dockerfile b/flavors/rust/Dockerfile
@@ -22,7 +22,7 @@ FROM zricethezav/gitleaks:v8.15.3 as gitleaks
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/flavors/salesforce/Dockerfile b/flavors/salesforce/Dockerfile
@@ -22,7 +22,7 @@ FROM zricethezav/gitleaks:v8.15.3 as gitleaks
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/flavors/security/Dockerfile b/flavors/security/Dockerfile
@@ -23,7 +23,7 @@ FROM checkmarx/kics:alpine as kics
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/flavors/swift/Dockerfile b/flavors/swift/Dockerfile
@@ -22,7 +22,7 @@ FROM zricethezav/gitleaks:v8.15.3 as gitleaks
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/flavors/terraform/Dockerfile b/flavors/terraform/Dockerfile
@@ -26,7 +26,7 @@ FROM checkmarx/kics:alpine as kics
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/linters/ansible_ansible_lint/Dockerfile b/linters/ansible_ansible_lint/Dockerfile
@@ -17,7 +17,7 @@
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/linters/bash_shellcheck/Dockerfile b/linters/bash_shellcheck/Dockerfile
@@ -17,7 +17,7 @@
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/linters/cloudformation_cfn_lint/Dockerfile b/linters/cloudformation_cfn_lint/Dockerfile
@@ -17,7 +17,7 @@
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/linters/dockerfile_hadolint/Dockerfile b/linters/dockerfile_hadolint/Dockerfile
@@ -17,7 +17,7 @@ FROM hadolint/hadolint:v2.12.0-alpine as hadolint
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/linters/go_revive/Dockerfile b/linters/go_revive/Dockerfile
@@ -17,7 +17,7 @@
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/linters/groovy_npm_groovy_lint/Dockerfile b/linters/groovy_npm_groovy_lint/Dockerfile
@@ -17,7 +17,7 @@
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/linters/java_checkstyle/Dockerfile b/linters/java_checkstyle/Dockerfile
@@ -17,7 +17,7 @@
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/linters/java_pmd/Dockerfile b/linters/java_pmd/Dockerfile
@@ -17,7 +17,7 @@
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/linters/javascript_es/Dockerfile b/linters/javascript_es/Dockerfile
@@ -17,7 +17,7 @@
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/linters/json_eslint_plugin_jsonc/Dockerfile b/linters/json_eslint_plugin_jsonc/Dockerfile
@@ -17,7 +17,7 @@
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/linters/jsx_eslint/Dockerfile b/linters/jsx_eslint/Dockerfile
@@ -17,7 +17,7 @@
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/linters/kotlin_ktlint/Dockerfile b/linters/kotlin_ktlint/Dockerfile
@@ -17,7 +17,7 @@
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/linters/php_psalm/Dockerfile b/linters/php_psalm/Dockerfile
@@ -17,7 +17,7 @@
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/linters/python_bandit/Dockerfile b/linters/python_bandit/Dockerfile
@@ -17,7 +17,7 @@
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/linters/repository_checkov/Dockerfile b/linters/repository_checkov/Dockerfile
@@ -17,7 +17,7 @@
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/linters/repository_devskim/Dockerfile b/linters/repository_devskim/Dockerfile
@@ -17,7 +17,7 @@
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

diff --git a/linters/repository_dustilock/Dockerfile b/linters/repository_dustilock/Dockerfile
@@ -17,7 +17,7 @@
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##