Skip to content

Commit 91ec9d6

Browse files
JackSpagnoliNHSJackSpagnoliNHS
committed
terraform image
1 parent d6415cb commit 91ec9d6

7 files changed

Lines changed: 179 additions & 0 deletions

File tree

‎src/projects/eps-storage-terraform/.devcontainer/.tool-versions‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
terraform 1.14.2

‎src/projects/eps-storage-terraform/.devcontainer/Dockerfile‎

Lines changed: 39 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,39 @@
1+
ARG BASE_VERSION_TAG=latest
2+
ARG BASE_IMAGE=ghcr.io/nhsdigital/eps-devcontainers/node_24_python_3_13:${BASE_VERSION_TAG}
3+
4+
FROM ${BASE_IMAGE}
5+
6+
ARG SCRIPTS_DIR=/usr/local/share/eps
7+
ARG CONTAINER_NAME
8+
ARG MULTI_ARCH_TAG
9+
ARG BASE_VERSION_TAG
10+
ARG IMAGE_TAG
11+
ARG TARGETARCH
12+
13+
ENV SCRIPTS_DIR=${SCRIPTS_DIR}
14+
ENV CONTAINER_NAME=${CONTAINER_NAME}
15+
ENV MULTI_ARCH_TAG=${MULTI_ARCH_TAG}
16+
ENV BASE_VERSION_TAG=${BASE_VERSION_TAG}
17+
ENV IMAGE_TAG=${IMAGE_TAG}
18+
ENV TARGETARCH=${TARGETARCH}
19+
20+
LABEL org.opencontainers.image.description="EPS devcontainer ${CONTAINER_NAME}:${IMAGE_TAG}"
21+
LABEL org.opencontainers.image.version=${IMAGE_TAG}
22+
LABEL org.opencontainers.image.base.name=${BASE_IMAGE}
23+
LABEL org.opencontainers.image.containerName=${CONTAINER_NAME}
24+
25+
USER root
26+
COPY --chmod=755 scripts ${SCRIPTS_DIR}/${CONTAINER_NAME}
27+
WORKDIR ${SCRIPTS_DIR}/${CONTAINER_NAME}
28+
RUN ./root_install.sh
29+
30+
USER vscode
31+
32+
WORKDIR ${SCRIPTS_DIR}/${CONTAINER_NAME}
33+
COPY .tool-versions /tmp/.tool-versions
34+
RUN cat /tmp/.tool-versions >> /home/vscode/.tool-versions
35+
36+
RUN ./vscode_install.sh
37+
38+
# Switch back to root to install the devcontainer CLI globally
39+
USER root

‎src/projects/eps-storage-terraform/.devcontainer/devcontainer.json‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
// For format details, see https://aka.ms/devcontainer.json. For config options, see the
2+
// README at: https://github.com/devcontainers/templates/tree/main/src/ubuntu
3+
{
4+
"name": "EPS Devcontainer node_24 python_3.13",
5+
// Or use a Dockerfile or Docker Compose file. More info: https://containers.dev/guide/dockerfile
6+
"build": {
7+
"dockerfile": "Dockerfile",
8+
"args": {
9+
"CONTAINER_NAME": "eps_devcontainer_${localEnv:CONTAINER_NAME}",
10+
"MULTI_ARCH_TAG": "${localEnv:MULTI_ARCH_TAG}",
11+
"BASE_VERSION_TAG": "${localEnv:BASE_VERSION_TAG}",
12+
"IMAGE_TAG": "${localEnv:IMAGE_TAG}"
13+
},
14+
"context": "."
15+
},
16+
"features": {}
17+
}
18+

‎src/projects/eps-storage-terraform/.devcontainer/scripts/root_install.sh‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
#!/usr/bin/env bash
2+
3+
set -e
4+
5+
# clean up
6+
apt-get clean
7+
rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*

‎src/projects/eps-storage-terraform/.devcontainer/scripts/vscode_install.sh‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
#!/usr/bin/env bash
2+
set -e
3+
4+
# install terraform using asdf
5+
asdf plugin add terraform
6+
asdf install

‎src/projects/eps-storage-terraform/.trivyignore.yaml‎

Lines changed: 107 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,107 @@
1+
vulnerabilities:
2+
- id: CVE-2022-25235
3+
statement: "expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution"
4+
purls:
5+
- "pkg:deb/ubuntu/firefox@147.0.3%2Bbuild1-0ubuntu0.22.04.1~mt1?arch=amd64&distro=ubuntu-22.04"
6+
expired_at: 2026-08-12
7+
- id: CVE-2022-25236
8+
statement: "expat: Namespace-separator characters in \"xmlns[:prefix]\" attribute values can lead to arbitrary code execution"
9+
purls:
10+
- "pkg:deb/ubuntu/firefox@147.0.3%2Bbuild1-0ubuntu0.22.04.1~mt1?arch=amd64&distro=ubuntu-22.04"
11+
expired_at: 2026-08-12
12+
- id: CVE-2022-26485
13+
statement: "Mozilla: Use-after-free in XSLT parameter processing"
14+
purls:
15+
- "pkg:deb/ubuntu/firefox@147.0.3%2Bbuild1-0ubuntu0.22.04.1~mt1?arch=amd64&distro=ubuntu-22.04"
16+
expired_at: 2026-08-12
17+
- id: CVE-2022-26486
18+
statement: "Mozilla: Use-after-free in WebGPU IPC Framework"
19+
purls:
20+
- "pkg:deb/ubuntu/firefox@147.0.3%2Bbuild1-0ubuntu0.22.04.1~mt1?arch=amd64&distro=ubuntu-22.04"
21+
expired_at: 2026-08-12
22+
- id: CVE-2026-25547
23+
statement: "brace-expansion: brace-expansion: Denial of Service via unbounded brace range expansion"
24+
purls:
25+
- "pkg:npm/%40isaacs/brace-expansion@5.0.0"
26+
expired_at: 2026-08-12
27+
- id: CVE-2025-64756
28+
statement: "glob: glob: Command Injection Vulnerability via Malicious Filenames"
29+
purls:
30+
- "pkg:npm/glob@10.4.5"
31+
- "pkg:npm/glob@11.0.3"
32+
expired_at: 2026-08-12
33+
- id: CVE-2026-23745
34+
statement: "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives"
35+
purls:
36+
- "pkg:npm/tar@7.5.1"
37+
expired_at: 2026-08-12
38+
- id: CVE-2026-23950
39+
statement: "node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition"
40+
purls:
41+
- "pkg:npm/tar@7.5.1"
42+
expired_at: 2026-08-12
43+
- id: CVE-2026-24842
44+
statement: "node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check"
45+
purls:
46+
- "pkg:npm/tar@7.5.1"
47+
expired_at: 2026-08-12
48+
- id: CVE-2022-25235
49+
statement: "expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution"
50+
purls:
51+
- "pkg:deb/ubuntu/firefox@147.0.3%2Bbuild1-0ubuntu0.22.04.1~mt1?arch=arm64&distro=ubuntu-22.04"
52+
expired_at: 2026-08-13
53+
- id: CVE-2022-25236
54+
statement: "expat: Namespace-separator characters in \"xmlns[:prefix]\" attribute values can lead to arbitrary code execution"
55+
purls:
56+
- "pkg:deb/ubuntu/firefox@147.0.3%2Bbuild1-0ubuntu0.22.04.1~mt1?arch=arm64&distro=ubuntu-22.04"
57+
expired_at: 2026-08-13
58+
- id: CVE-2022-26485
59+
statement: "Mozilla: Use-after-free in XSLT parameter processing"
60+
purls:
61+
- "pkg:deb/ubuntu/firefox@147.0.3%2Bbuild1-0ubuntu0.22.04.1~mt1?arch=arm64&distro=ubuntu-22.04"
62+
expired_at: 2026-08-13
63+
- id: CVE-2022-26486
64+
statement: "Mozilla: Use-after-free in WebGPU IPC Framework"
65+
purls:
66+
- "pkg:deb/ubuntu/firefox@147.0.3%2Bbuild1-0ubuntu0.22.04.1~mt1?arch=arm64&distro=ubuntu-22.04"
67+
expired_at: 2026-08-13
68+
- id: CVE-2022-25235
69+
statement: "expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution"
70+
purls:
71+
- "pkg:deb/ubuntu/firefox@147.0.4%2Bbuild1-0ubuntu0.22.04.1~mt1?arch=arm64&distro=ubuntu-22.04"
72+
expired_at: 2026-08-16
73+
- id: CVE-2022-25236
74+
statement: "expat: Namespace-separator characters in \"xmlns[:prefix]\" attribute values can lead to arbitrary code execution"
75+
purls:
76+
- "pkg:deb/ubuntu/firefox@147.0.4%2Bbuild1-0ubuntu0.22.04.1~mt1?arch=arm64&distro=ubuntu-22.04"
77+
expired_at: 2026-08-16
78+
- id: CVE-2022-26485
79+
statement: "Mozilla: Use-after-free in XSLT parameter processing"
80+
purls:
81+
- "pkg:deb/ubuntu/firefox@147.0.4%2Bbuild1-0ubuntu0.22.04.1~mt1?arch=arm64&distro=ubuntu-22.04"
82+
expired_at: 2026-08-16
83+
- id: CVE-2022-26486
84+
statement: "Mozilla: Use-after-free in WebGPU IPC Framework"
85+
purls:
86+
- "pkg:deb/ubuntu/firefox@147.0.4%2Bbuild1-0ubuntu0.22.04.1~mt1?arch=arm64&distro=ubuntu-22.04"
87+
expired_at: 2026-08-16
88+
- id: CVE-2022-25235
89+
statement: "expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution"
90+
purls:
91+
- "pkg:deb/ubuntu/firefox@147.0.4%2Bbuild1-0ubuntu0.22.04.1~mt1?arch=amd64&distro=ubuntu-22.04"
92+
expired_at: 2026-08-16
93+
- id: CVE-2022-25236
94+
statement: "expat: Namespace-separator characters in \"xmlns[:prefix]\" attribute values can lead to arbitrary code execution"
95+
purls:
96+
- "pkg:deb/ubuntu/firefox@147.0.4%2Bbuild1-0ubuntu0.22.04.1~mt1?arch=amd64&distro=ubuntu-22.04"
97+
expired_at: 2026-08-16
98+
- id: CVE-2022-26485
99+
statement: "Mozilla: Use-after-free in XSLT parameter processing"
100+
purls:
101+
- "pkg:deb/ubuntu/firefox@147.0.4%2Bbuild1-0ubuntu0.22.04.1~mt1?arch=amd64&distro=ubuntu-22.04"
102+
expired_at: 2026-08-16
103+
- id: CVE-2022-26486
104+
statement: "Mozilla: Use-after-free in WebGPU IPC Framework"
105+
purls:
106+
- "pkg:deb/ubuntu/firefox@147.0.4%2Bbuild1-0ubuntu0.22.04.1~mt1?arch=amd64&distro=ubuntu-22.04"
107+
expired_at: 2026-08-16

‎src/projects/eps-storage-terraform/trivy.yaml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
ignorefile: "src/projects/eps-storage-terraform/.trivyignore_combined.yaml"

0 commit comments

Comments
 (0)