@sw-tsdk/connector 3.17.0 → 3.18.0-next.dab98f3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/lib/templates/python_310_definition_fips/Dockerfile +6 -4
  2. package/lib/templates/python_311_definition_fips/Dockerfile +6 -4
  3. package/lib/templates/python_312_definition_fips/Dockerfile +6 -4
  4. package/lib/templates/python_39_definition_fips/Dockerfile +6 -4
  5. package/package.json +5 -5
package/lib/templates/python_310_definition_fips/Dockerfile CHANGED
@@ -31,9 +31,10 @@ RUN if [ $(stat -c %s "/scripts/runner.sh") -ne 0 ]; then chmod +x /scripts/runn
31
31
 
32
32
  RUN rm -rf /scripts
33
33
 
34
- # Install connector Python dependencies
34
+ # Install connector Python dependencies into an isolated location.
35
+ # This avoids overwriting the runner's FIPS-compliant /usr/local/lib entirely.
35
36
  COPY requirements.txt .
36
- RUN pip install -r requirements.txt
37
+ RUN pip install --target /connector-deps -r requirements.txt
37
38
 
38
39
  # Stage 3: runtime-image — minimal distroless FIPS image, no shell, only copy artifacts
39
40
  FROM ${RUNNER_IMAGE_NAME} AS runtime-image
@@ -41,8 +42,9 @@ USER root
41
42
  ARG ASSET_KEYS
42
43
  ENV ASSET_KEYS=$ASSET_KEYS
43
44
 
44
- COPY --from=builder /usr/local/lib /usr/local/lib
45
- COPY --from=builder /usr/local/bin /usr/local/bin
45
+ # Copy only the connector-specific packages into site-packages.
46
+ # The runner's own FIPS Python installation remains intact.
47
+ COPY --from=builder /connector-deps /usr/local/lib/python3.10/site-packages/
46
48
 
47
49
  COPY connector /app
48
50
  WORKDIR /app
package/lib/templates/python_311_definition_fips/Dockerfile CHANGED
@@ -31,9 +31,10 @@ RUN if [ $(stat -c %s "/scripts/runner.sh") -ne 0 ]; then chmod +x /scripts/runn
31
31
 
32
32
  RUN rm -rf /scripts
33
33
 
34
- # Install connector Python dependencies
34
+ # Install connector Python dependencies into an isolated location.
35
+ # This avoids overwriting the runner's FIPS-compliant /usr/local/lib entirely.
35
36
  COPY requirements.txt .
36
- RUN pip install -r requirements.txt
37
+ RUN pip install --target /connector-deps -r requirements.txt
37
38
 
38
39
  # Stage 3: runtime-image — minimal distroless FIPS image, no shell, only copy artifacts
39
40
  FROM ${RUNNER_IMAGE_NAME} AS runtime-image
@@ -41,8 +42,9 @@ USER root
41
42
  ARG ASSET_KEYS
42
43
  ENV ASSET_KEYS=$ASSET_KEYS
43
44
 
44
- COPY --from=builder /usr/local/lib /usr/local/lib
45
- COPY --from=builder /usr/local/bin /usr/local/bin
45
+ # Copy only the connector-specific packages into site-packages.
46
+ # The runner's own FIPS Python installation remains intact.
47
+ COPY --from=builder /connector-deps /usr/local/lib/python3.11/site-packages/
46
48
 
47
49
  COPY connector /app
48
50
  WORKDIR /app
package/lib/templates/python_312_definition_fips/Dockerfile CHANGED
@@ -31,9 +31,10 @@ RUN if [ $(stat -c %s "/scripts/runner.sh") -ne 0 ]; then chmod +x /scripts/runn
31
31
 
32
32
  RUN rm -rf /scripts
33
33
 
34
- # Install connector Python dependencies
34
+ # Install connector Python dependencies into an isolated location.
35
+ # This avoids overwriting the runner's FIPS-compliant /usr/local/lib entirely.
35
36
  COPY requirements.txt .
36
- RUN pip install -r requirements.txt
37
+ RUN pip install --target /connector-deps -r requirements.txt
37
38
 
38
39
  # Stage 3: runtime-image — minimal distroless FIPS image, no shell, only copy artifacts
39
40
  FROM ${RUNNER_IMAGE_NAME} AS runtime-image
@@ -41,8 +42,9 @@ USER root
41
42
  ARG ASSET_KEYS
42
43
  ENV ASSET_KEYS=$ASSET_KEYS
43
44
 
44
- COPY --from=builder /usr/local/lib /usr/local/lib
45
- COPY --from=builder /usr/local/bin /usr/local/bin
45
+ # Copy only the connector-specific packages into site-packages.
46
+ # The runner's own FIPS Python installation remains intact.
47
+ COPY --from=builder /connector-deps /usr/local/lib/python3.12/site-packages/
46
48
 
47
49
  COPY connector /app
48
50
  WORKDIR /app
package/lib/templates/python_39_definition_fips/Dockerfile CHANGED
@@ -31,9 +31,10 @@ RUN if [ $(stat -c %s "/scripts/runner.sh") -ne 0 ]; then chmod +x /scripts/runn
31
31
 
32
32
  RUN rm -rf /scripts
33
33
 
34
- # Install connector Python dependencies
34
+ # Install connector Python dependencies into an isolated location.
35
+ # This avoids overwriting the runner's FIPS-compliant /usr/local/lib entirely.
35
36
  COPY requirements.txt .
36
- RUN pip install -r requirements.txt
37
+ RUN pip install --target /connector-deps -r requirements.txt
37
38
 
38
39
  # Stage 3: runtime-image — minimal distroless FIPS image, no shell, only copy artifacts
39
40
  FROM ${RUNNER_IMAGE_NAME} AS runtime-image
@@ -41,8 +42,9 @@ USER root
41
42
  ARG ASSET_KEYS
42
43
  ENV ASSET_KEYS=$ASSET_KEYS
43
44
 
44
- COPY --from=builder /usr/local/lib /usr/local/lib
45
- COPY --from=builder /usr/local/bin /usr/local/bin
45
+ # Copy only the connector-specific packages into site-packages.
46
+ # The runner's own FIPS Python installation remains intact.
47
+ COPY --from=builder /connector-deps /usr/local/lib/python3.9/site-packages/
46
48
 
47
49
  COPY connector /app
48
50
  WORKDIR /app
package/package.json CHANGED
@@ -9,9 +9,9 @@
9
9
  "@oclif/core": "2.8.5",
10
10
  "@oclif/plugin-help": "5.2.9",
11
11
  "@oclif/plugin-plugins": "3.1.2",
12
- "@sw-tsdk/common": "3.17.0",
13
- "@sw-tsdk/core": "3.17.0",
14
- "@sw-tsdk/docker": "3.17.0",
12
+ "@sw-tsdk/common": "3.18.0-next.dab98f3",
13
+ "@sw-tsdk/core": "3.18.0-next.dab98f3",
14
+ "@sw-tsdk/docker": "3.18.0-next.dab98f3",
15
15
  "@swimlane/connector-interfaces": "1.11.0",
16
16
  "@swimlane/cosign": "1.4.1",
17
17
  "archiver": "5.3.1",
@@ -66,6 +66,6 @@
66
66
  "test": "jest --passWithNoTests"
67
67
  },
68
68
  "types": "lib/index.d.ts",
69
- "version": "3.17.0",
70
- "gitHead": "11cb6c0cb0fcfb28207ff9706d49625d1898424d"
69
+ "version": "3.18.0-next.dab98f3",
70
+ "gitHead": "dab98f333f2920383ec5ee5d14737dec193dcde6"
71
71
  }