Skip to content

Release/0.8.2 - #204

Merged
jackiryan merged 7 commits into
mainfrom
release/0.8.2
Aug 12, 2026
Merged

Release/0.8.2#204
jackiryan merged 7 commits into
mainfrom
release/0.8.2

Conversation

@jackiryan

Copy link
Copy Markdown
Contributor

Description

Second point release to address security vulnerabilities flagged by snyk and AWS ECR image scans on bignbit. There's also a small bugfix to the submit_harmony_job lambda.

Overview of work done

  • Add snyk scanning to github actions workflow, and save the output on the advanced security scan page
  • Update packages in the docker image to address several critical and high severity vulnerabilities
  • Update python packages to address security vulnerabilities
  • Patch a minor bug needed for OSCAR L4 processing aka vector flow

Overview of verification done

  • Deployed version to services-sit venue
  • Confirmed no critical security vulnerabilities from ECR image scan (only remaining high severity are related to gdal and have been dispositioned)
  • Ran bignbit regression tests and dispositioned that failures are considered "test-isms"
  • Ran unit tests (including 1 new one) and confirmed passing

Overview of integration done

  • [TBD] Deploy version to a consolidated cumulus stack and confirm with c-cumulus that acceptance criteria have been met

PR checklist:

  • Linted
  • Updated unit tests
  • Updated changelog
  • Integration testing

See Pull Request Review Checklist for pointers on reviewing this pull request

jackiryan and others added 7 commits June 30, 2026 15:48
* issue/194: Add snyk scan to cicd workflow

* issue/194: Address dependency issues from snyk scan

* Fix issues with snyk scan on docker images

* Fix additional issues with snyk scanning

* Additional fix for snyk docker scanning

* Try using snyk container test instead of older approach

* issue/194: Fix vulnerability in docker image, add step to workflow after snyk scanning

* Update changelog

* Update dockerfile to also update other OS packages

* issue/194: Remove aws rie from real deployments since it is used for testing
@jackiryan
jackiryan requested a review from jamesfwood August 11, 2026 21:59
@tloubrieu-jpl tloubrieu-jpl moved this to needs:triage in podaac Aug 11, 2026
@jackiryan
jackiryan requested a review from ckhowardASDC August 11, 2026 21:59
@jackiryan
jackiryan merged commit 6837064 into main Aug 12, 2026
2 checks passed
@jackiryan
jackiryan deleted the release/0.8.2 branch August 12, 2026 16:21
@tloubrieu-jpl tloubrieu-jpl moved this from needs:triage to closed in podaac Aug 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: closed

Development

Successfully merging this pull request may close these issues.

3 participants