Remove security vulnerabilities in runtime-api

[dcaegen2/platform.git] / mod / runtimeapi / runtime-web / pom.xml

diff --git a/mod/runtimeapi/runtime-web/pom.xml b/mod/runtimeapi/runtime-web/pom.xml
index 3b39845..f33cee1 100644 (file)
--- a/mod/runtimeapi/runtime-web/pom.xml
+++ b/mod/runtimeapi/runtime-web/pom.xml
@@ -1,14 +1,33 @@
 <?xml version="1.0" encoding="UTF-8"?>
+<!--
+============LICENSE_START=======================================================
+Copyright (c) 2019-2020 AT&T Intellectual Property. All rights reserved.
+================================================================================
+Modifications Copyright (c) 2020 Nokia
+================================================================================
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+============LICENSE_END=========================================================
+-->
 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
        <modelVersion>4.0.0</modelVersion>
        <parent>
                <groupId>org.onap.dcaegen2.platform.mod</groupId>
                <artifactId>runtimeapi</artifactId>
-               <version>1.0.0</version>
+               <version>1.2.2</version>
        </parent>
        <artifactId>runtime-web</artifactId>
-       <version>1.0.0</version>
+       <version>1.2.2-SNAPSHOT</version>
        <packaging>jar</packaging>
        <name>runtime-web</name>
        <description>MOD Runtime Web Module</description>
@@ -16,7 +35,7 @@
                <dependency>
                        <groupId>org.onap.dcaegen2.platform.mod</groupId>
                        <artifactId>runtime-core</artifactId>
-                       <version>1.0.0</version>
+                       <version>1.2.2</version>
                </dependency>
                <dependency>
                        <groupId>org.springframework.boot</groupId>
@@ -46,19 +65,25 @@
                </dependency>
                <dependency>
                        <groupId>io.springfox</groupId>
-                       <artifactId>springfox-swagger2</artifactId>
-                       <version>2.9.2</version>
+                       <artifactId>springfox-boot-starter</artifactId>
+                       <version>3.0.0</version>
                </dependency>
                <dependency>
                        <groupId>io.springfox</groupId>
                        <artifactId>springfox-swagger-ui</artifactId>
-                       <version>2.9.2</version>
+                       <version>3.0.0</version>
                </dependency>
                <dependency>
                        <groupId>org.json</groupId>
                        <artifactId>json</artifactId>
                        <version>20190722</version>
                </dependency>
+               <dependency>
+                       <groupId>org.apache.httpcomponents</groupId>
+                       <artifactId>httpclient</artifactId>
+                       <version>4.5.8</version>
+                       <scope>test</scope>
+               </dependency>
        </dependencies>
 
        <build>
@@ -86,7 +111,7 @@
                                                        <name>onap/${project.groupId}.${project.artifactId}</name>
                                                        <registry>${onap.nexus.dockerregistry.daily}</registry>
                                                        <build>
-                                                               <from>openjdk:8-jre-alpine</from>
+                                                               <from>openjdk:11-jre-slim</from>
                                                                <tags>
                                                                        <tag>latest</tag>
                                                                        <tag>${project.version}</tag>
@@ -95,6 +120,9 @@
                                                                <assembly>
                                                                        <descriptorRef>artifact</descriptorRef>
                                                                </assembly>
+                                                               <runCmds>
+                                                                 <runCmd>groupadd -r dcaemod &amp;&amp; useradd -ms /bin/bash dcaemod -g dcaemod &amp;&amp; mkdir -p /maven/data &amp;&amp; chown -R dcaemod:dcaemod /maven/data</runCmd>
+                                                               </runCmds>
                                                                <workdir>/maven</workdir>
                                                                <volumes>
                                                                        <volume>/tmp</volume>
@@ -102,6 +130,7 @@
                                                                <ports>
                                                                        <port>9090</port>
                                                                </ports>
+                                                               <user>dcaemod</user>
                                                                <entryPoint>
                                                                        <exec>
                                                                                <arg>java</arg>