chore(deps): update postgres:17.2-alpine docker digest from 17.2 to 17.2-alpine (docker-compose.yml)

[renovate]

This PR contains the following updates:

Package	Update	Change
postgres	digest	e7897ba -> d37d2c1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dryrunsecurity]

DryRun Security Summary

The pull request updates the PostgreSQL Docker image in the docker-compose.yml file to a newer version, which likely includes security improvements and should be reviewed for potential impacts on the DefectDojo application.

Expand for full summary

Summary:

The provided code change is related to the docker-compose.yml file, which is used to define and configure the services required to run the DefectDojo application in a containerized environment. The key change in this pull request is the update to the postgres service image from postgres:17.2-alpine@sha256:e7897baa70dae1968d23d785adb4aeb699175e0bcaae44f98a7083ecb9668b93 to postgres:17.2-alpine@sha256:d37d2c160d34430877c802e5adc22824a2ad453499db9bab1a2ceb2be6c1a46f. This indicates that the PostgreSQL database image version has been updated to a newer version.

From an application security perspective, the update to the PostgreSQL image is generally a positive change, as it likely includes security fixes and improvements. However, it's important to review the release notes or change log for the new PostgreSQL version to ensure that there are no known security vulnerabilities or breaking changes that could impact the DefectDojo application. Additionally, it's a good practice to regularly update the base images used in your Docker containers to ensure that you are running the latest versions with the latest security patches, which helps to mitigate potential vulnerabilities and maintain a secure application environment.

Files Changed:

• docker-compose.yml: This file has been updated to use a newer version of the PostgreSQL Docker image, from postgres:17.2-alpine@sha256:e7897baa70dae1968d23d785adb4aeb699175e0bcaae44f98a7083ecb9668b93 to postgres:17.2-alpine@sha256:d37d2c160d34430877c802e5adc22824a2ad453499db9bab1a2ceb2be6c1a46f. This change should be reviewed to ensure that the new PostgreSQL version does not introduce any security vulnerabilities or breaking changes that could impact the DefectDojo application.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

View PR in the DryRun Dashboard.

[mtesauro]

Approved