Remove security vulnerabilities in runtime-api

[dcaegen2/platform.git] / mod / runtimeapi / runtime-web / pom.xml

diff --git a/mod/runtimeapi/runtime-web/pom.xml b/mod/runtimeapi/runtime-web/pom.xml
index ff08ac1..f33cee1 100644 (file)
--- a/mod/runtimeapi/runtime-web/pom.xml
+++ b/mod/runtimeapi/runtime-web/pom.xml
@@ -3,6 +3,8 @@
 ============LICENSE_START=======================================================
 Copyright (c) 2019-2020 AT&T Intellectual Property. All rights reserved.
 ================================================================================
+Modifications Copyright (c) 2020 Nokia
+================================================================================
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
 You may obtain a copy of the License at
@@ -22,10 +24,10 @@ limitations under the License.
        <parent>
                <groupId>org.onap.dcaegen2.platform.mod</groupId>
                <artifactId>runtimeapi</artifactId>
-               <version>1.0.1</version>
+               <version>1.2.2</version>
        </parent>
        <artifactId>runtime-web</artifactId>
-       <version>1.0.1</version>
+       <version>1.2.2-SNAPSHOT</version>
        <packaging>jar</packaging>
        <name>runtime-web</name>
        <description>MOD Runtime Web Module</description>
@@ -33,7 +35,7 @@ limitations under the License.
                <dependency>
                        <groupId>org.onap.dcaegen2.platform.mod</groupId>
                        <artifactId>runtime-core</artifactId>
-                       <version>1.0.1</version>
+                       <version>1.2.2</version>
                </dependency>
                <dependency>
                        <groupId>org.springframework.boot</groupId>
@@ -63,13 +65,13 @@ limitations under the License.
                </dependency>
                <dependency>
                        <groupId>io.springfox</groupId>
-                       <artifactId>springfox-swagger2</artifactId>
-                       <version>2.9.2</version>
+                       <artifactId>springfox-boot-starter</artifactId>
+                       <version>3.0.0</version>
                </dependency>
                <dependency>
                        <groupId>io.springfox</groupId>
                        <artifactId>springfox-swagger-ui</artifactId>
-                       <version>2.9.2</version>
+                       <version>3.0.0</version>
                </dependency>
                <dependency>
                        <groupId>org.json</groupId>
@@ -109,7 +111,7 @@ limitations under the License.
                                                        <name>onap/${project.groupId}.${project.artifactId}</name>
                                                        <registry>${onap.nexus.dockerregistry.daily}</registry>
                                                        <build>
-                                                               <from>openjdk:8-jre-alpine</from>
+                                                               <from>openjdk:11-jre-slim</from>
                                                                <tags>
                                                                        <tag>latest</tag>
                                                                        <tag>${project.version}</tag>
@@ -118,6 +120,9 @@ limitations under the License.
                                                                <assembly>
                                                                        <descriptorRef>artifact</descriptorRef>
                                                                </assembly>
+                                                               <runCmds>
+                                                                 <runCmd>groupadd -r dcaemod &amp;&amp; useradd -ms /bin/bash dcaemod -g dcaemod &amp;&amp; mkdir -p /maven/data &amp;&amp; chown -R dcaemod:dcaemod /maven/data</runCmd>
+                                                               </runCmds>
                                                                <workdir>/maven</workdir>
                                                                <volumes>
                                                                        <volume>/tmp</volume>
@@ -125,6 +130,7 @@ limitations under the License.
                                                                <ports>
                                                                        <port>9090</port>
                                                                </ports>
+                                                               <user>dcaemod</user>
                                                                <entryPoint>
                                                                        <exec>
                                                                                <arg>java</arg>