Merge pull request #225 from GemeenteNijmegen/acceptance

feat: resolve SecurityHub notifications
GemeenteNijmegen · Jan 3, 2024 · e522814 · e522814
2 parents 92e16d9 + 647a6e8
commit e522814
Show file tree

Hide file tree

Showing 4 changed files with 13 additions and 10 deletions.
diff --git a/package.json b/package.json
diff --git a/src/Configuration.ts b/src/Configuration.ts
@@ -71,7 +71,7 @@ export const configurations: { [key: string]: Configuration } = {
     branchName: 'acceptance',
     yiviVersionNumber: 'v0.15.1',
     yiviVersionChecksum: '27182cc8203234eca14b60fe488c1157fce0d1385410a83216436418d5b03a52',
-    alpineLinuxVersion: '3.18.3',
+    alpineLinuxVersion: '3.19.0',
     codeStarConnectionArn: Statics.codeStarConnectionArn,
     deployFromEnvironment: Statics.deploymentEnvironment,
     deployToEnvironment: Statics.acceptanceEnvironment,
@@ -86,7 +86,7 @@ export const configurations: { [key: string]: Configuration } = {
     branchName: 'main',
     yiviVersionNumber: 'v0.15.1',
     yiviVersionChecksum: '27182cc8203234eca14b60fe488c1157fce0d1385410a83216436418d5b03a52',
-    alpineLinuxVersion: '3.18.3',
+    alpineLinuxVersion: '3.19.0',
     codeStarConnectionArn: Statics.codeStarConnectionArn,
     deployFromEnvironment: Statics.deploymentEnvironment,
     deployToEnvironment: Statics.productionEnvironment,

diff --git a/src/constructs/EcsFargateService.ts b/src/constructs/EcsFargateService.ts
@@ -158,6 +158,9 @@ export class EcsFargateService extends Construct {
       command: ['chmod 0777 /storage'], // TODO check proper restriction
       readonlyRootFilesystem: true,
       essential: false, // exit after running
+      logging: ecs.LogDriver.awsLogs({
+        streamPrefix: 'init',
+      }),
     });
     initContainer.addMountPoints({
       containerPath: '/storage',

diff --git a/yarn.lock b/yarn.lock