rdar://150208677 ([Max Vulnerability] AWS Image contains vulnerable packages) (apache#61)

Author: jiangzho

migration-watchdog/build.gradle

@@ -60,6 +60,7 @@ dependencies {
         exclude group: "org.xerial.snappy"
         exclude group: 'com.squareup.okhttp3'
         exclude group: 'com.squareup.okio'
+        exclude group: 'com.google.protobuf', module: 'protobuf-java'
     }
     compileOnly(libs.lombok)
 

rio.pcl

@@ -264,6 +264,16 @@ pipelines {
         }
       }
     }
+    security {
+       scanReports {
+         dockerfile {
+           continueOnFail = false
+         }
+         dockerload {
+           continueOnFail = false
+         }
+       }
+     }
   }
   new {
     name = "watchdog-image-0.1-snapshot"
@@ -299,6 +309,16 @@ pipelines {
         }
       }
     }
+    security {
+       scanReports {
+         dockerfile {
+           continueOnFail = false
+         }
+         dockerload {
+           continueOnFail = false
+         }
+       }
+     }
   }
   new {
     name = "image-0.1-release"
@@ -333,6 +353,16 @@ pipelines {
         }
       }
     }
+    security {
+       scanReports {
+         dockerfile {
+           continueOnFail = false
+         }
+         dockerload {
+           continueOnFail = false
+         }
+       }
+     }
   }
   new {
     name = "watchdog-image-0.1-release"
@@ -369,5 +399,15 @@ pipelines {
         }
       }
     }
+    security {
+       scanReports {
+         dockerfile {
+           continueOnFail = false
+         }
+         dockerload {
+           continueOnFail = false
+         }
+       }
+     }
   }
 }

spark-operator/build.gradle

@@ -56,6 +56,7 @@ dependencies {
     exclude group: "org.xerial.snappy"
     exclude group: 'com.squareup.okhttp3'
     exclude group: 'com.squareup.okio'
+    exclude group: 'com.google.protobuf', module: 'protobuf-java'
   }
   compileOnly(libs.lombok)
 

spark-submission-worker/build.gradle

@@ -30,6 +30,7 @@ dependencies {
     exclude group: "org.rocksdb"
     exclude group: "org.xerial.snappy"
     exclude group: 'commons-collections', module: 'commons-collections'
+    exclude group: 'com.google.protobuf', module: 'protobuf-java'
   }
 
   compileOnly(libs.lombok)