Forcing and sqlite upgrade in all our images

.gitignore

@@ -119,5 +119,5 @@ metadata-service/restli-servlet-impl/bin/
 metadata-service/servlet/bin/
 metadata-service/war/bin/
 metadata-utils/bin/
-test-models/bin/main/
-test-models/bin/mainGeneratedDataTemplate/com/datahub/
+test-models/bin/
+

docker/datahub-frontend/Dockerfile

@@ -6,8 +6,9 @@ FROM alpine:3 AS base
 RUN addgroup -S datahub && adduser -S datahub -G datahub
 
 # Upgrade Alpine and base packages
+# PFP-260: Upgrade Sqlite to >=3.28.0-r0 to fix https://security.snyk.io/vuln/SNYK-ALPINE39-SQLITE-449762
 RUN apk --no-cache --update-cache --available upgrade \
-    && apk --no-cache add curl \
+    && apk --no-cache add curl sqlite \
     && apk --no-cache add openjdk11-jre --repository=http://dl-cdn.alpinelinux.org/alpine/edge/community
 
 FROM base as prod-install

docker/datahub-gms/Dockerfile

@@ -16,8 +16,9 @@ FROM alpine:3 AS base
 
 # Upgrade Alpine and base packages
 ENV JMX_VERSION=0.18.0
+# PFP-260: Upgrade Sqlite to >=3.28.0-r0 to fix https://security.snyk.io/vuln/SNYK-ALPINE39-SQLITE-449762
 RUN apk --no-cache --update-cache --available upgrade \
-    && apk --no-cache add curl bash coreutils gcompat \
+    && apk --no-cache add curl bash coreutils gcompat sqlite \
     && apk --no-cache add openjdk11-jre --repository=http://dl-cdn.alpinelinux.org/alpine/edge/community \
     && curl -sS https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-runner/9.4.46.v20220331/jetty-runner-9.4.46.v20220331.jar --output jetty-runner.jar \
     && curl -sS https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-jmx/9.4.46.v20220331/jetty-jmx-9.4.46.v20220331.jar --output jetty-jmx.jar \

docker/datahub-mae-consumer/Dockerfile

@@ -16,8 +16,9 @@ FROM alpine:3 AS base
 
 # Upgrade Alpine and base packages
 ENV JMX_VERSION=0.18.0
+# PFP-260: Upgrade Sqlite to >=3.28.0-r0 to fix https://security.snyk.io/vuln/SNYK-ALPINE39-SQLITE-449762
 RUN apk --no-cache --update-cache --available upgrade \
-    && apk --no-cache add curl bash coreutils \
+    && apk --no-cache add curl bash coreutils sqlite \
     && apk --no-cache add openjdk11-jre --repository=http://dl-cdn.alpinelinux.org/alpine/edge/community \
     && wget --no-verbose https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/download/v1.24.0/opentelemetry-javaagent.jar \
     && wget --no-verbose https://repo1.maven.org/maven2/io/prometheus/jmx/jmx_prometheus_javaagent/${JMX_VERSION}/jmx_prometheus_javaagent-${JMX_VERSION}.jar -O jmx_prometheus_javaagent.jar \

docker/datahub-mce-consumer/Dockerfile

@@ -16,8 +16,9 @@ FROM alpine:3 AS base
 
 # Upgrade Alpine and base packages
 ENV JMX_VERSION=0.18.0
+# PFP-260: Upgrade Sqlite to >=3.28.0-r0 to fix https://security.snyk.io/vuln/SNYK-ALPINE39-SQLITE-449762
 RUN apk --no-cache --update-cache --available upgrade \
-    && apk --no-cache add curl bash \
+    && apk --no-cache add curl bash sqlite \
     && apk --no-cache add openjdk11-jre --repository=http://dl-cdn.alpinelinux.org/alpine/edge/community \
     && wget --no-verbose https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/download/v1.24.0/opentelemetry-javaagent.jar \
     && wget --no-verbose https://repo1.maven.org/maven2/io/prometheus/jmx/jmx_prometheus_javaagent/${JMX_VERSION}/jmx_prometheus_javaagent-${JMX_VERSION}.jar -O jmx_prometheus_javaagent.jar \

docker/datahub-upgrade/Dockerfile

@@ -16,8 +16,9 @@ FROM alpine:3 AS base
 
 # Upgrade Alpine and base packages
 ENV JMX_VERSION=0.18.0
+# PFP-260: Upgrade Sqlite to >=3.28.0-r0 to fix https://security.snyk.io/vuln/SNYK-ALPINE39-SQLITE-449762
 RUN apk --no-cache --update-cache --available upgrade \
-    && apk --no-cache add curl bash coreutils gcompat \
+    && apk --no-cache add curl bash coreutils gcompat sqlite \
     && apk --no-cache add openjdk11-jre --repository=http://dl-cdn.alpinelinux.org/alpine/edge/community \
     && curl -sS https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-runner/9.4.46.v20220331/jetty-runner-9.4.46.v20220331.jar --output jetty-runner.jar \
     && curl -sS https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-jmx/9.4.46.v20220331/jetty-jmx-9.4.46.v20220331.jar --output jetty-jmx.jar \

docker/elasticsearch-setup/Dockerfile

@@ -8,7 +8,8 @@ FROM golang:1-alpine3.17 AS binary
 ENV DOCKERIZE_VERSION v0.6.1
 WORKDIR /go/src/github.com/jwilder
 
-RUN apk --no-cache --update add openssl git tar curl 
+# PFP-260: Upgrade Sqlite to >=3.28.0-r0 to fix https://security.snyk.io/vuln/SNYK-ALPINE39-SQLITE-449762
+RUN apk --no-cache --update add openssl git tar curl sqlite
 
 WORKDIR /go/src/github.com/jwilder/dockerize
 

docker/mysql-setup/Dockerfile

@@ -12,7 +12,8 @@ RUN go install github.com/jwilder/dockerize@$DOCKERIZE_VERSION
 FROM alpine:3
 COPY --from=binary /go/bin/dockerize /usr/local/bin
 
-RUN apk add --no-cache mysql-client bash mariadb-connector-c
+# PFP-260: Upgrade Sqlite to >=3.28.0-r0 to fix https://security.snyk.io/vuln/SNYK-ALPINE39-SQLITE-449762
+RUN apk add --no-cache mysql-client bash mariadb-connector-c mysql-setup
 
 COPY docker/mysql-setup/init.sql /init.sql
 COPY docker/mysql-setup/init.sh /init.sh

docker/postgres-setup/Dockerfile

@@ -11,7 +11,8 @@ RUN go install github.com/jwilder/dockerize@$DOCKERIZE_VERSION
 
 FROM alpine:3
 
-RUN apk add --no-cache postgresql-client
+# PFP-260: Upgrade Sqlite to >=3.28.0-r0 to fix https://security.snyk.io/vuln/SNYK-ALPINE39-SQLITE-449762
+RUN apk add --no-cache postgresql-client sqlite
 COPY --from=binary /go/bin/dockerize /usr/local/bin
 
 COPY docker/postgres-setup/init.sql /init.sql