dependobot alerts (#134)

Author: kmanisai

.github/workflows/onpullrequest.yml

@@ -52,7 +52,7 @@ jobs:
       - name: Setup Python
         uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
         with:
-          python-version: '3.8.10'
+          python-version: '3.9'
 
       - name: Install Poetry
         run: pip install poetry==1.7.1

inteltrustauthorityclient/examples/.env

@@ -5,16 +5,16 @@
 ###########################################
 
 # Ubuntu base image version
-UBUNTU_VERSION=20.04
+UBUNTU_VERSION=22.04
 
 # Trust Authority Client version
 # Change this value for release
 TRUST_AUTHORITY_CLIENT_VERSION=v1.1.0
 
 # Intel SGX sdk version variables
-DCAP_VERSION=1.19.100.3-focal1
+DCAP_VERSION=1.19.100.3-jammy1
 PSW_VERSION=2.22.100.3
 
 # Adapter selection
-# Change this to sgx/aztdx/nvgpu as per the need to build the correct image.
+# Change this to sgx/aztdx/tdx/nvgpu as per the need to build the correct image.
 ADAPTER_TYPE=tdx

inteltrustauthorityclient/examples/sgx_sample_app/Dockerfile

@@ -39,28 +39,26 @@ ARG ADAPTER_TYPE
 ENV ADAPTER_TYPE=${ADAPTER_TYPE}
 RUN apt update && apt install -y --no-install-recommends gnupg wget python3 pip build-essential
 
-# Adding SGX repo to Ubuntu focal
-RUN echo 'deb [arch=amd64] https://download.01.org/intel-sgx/sgx_repo/ubuntu focal main' > /etc/apt/sources.list.d/intel-sgx.list && \
-    wget https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key -O /tmp/intel-sgx-deb.key && \
-    apt-key add /tmp/intel-sgx-deb.key && \
-    rm /tmp/intel-sgx-deb.key
+# Adding SGX repo to Ubuntu jammy
+RUN echo 'deb [arch=amd64] https://download.01.org/intel-sgx/sgx_repo/ubuntu jammy main' | tee /etc/apt/sources.list.d/intel-sgx.list && \
+    wget https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key && apt-key add intel-sgx-deb.key && cat intel-sgx-deb.key | tee /etc/apt/keyrings/intelsgx-keyring.asc > /dev/null
 
 WORKDIR /opt/intel
 # Download SGX SDK binary
-RUN /bin/bash -c "set -o pipefail && wget -q https://download.01.org/intel-sgx/sgx-linux/2.22/distro/ubuntu20.04-server/sgx_linux_x64_sdk_${PSW_VERSION}.bin && \
+RUN /bin/bash -c "set -o pipefail && wget -q https://download.01.org/intel-sgx/sgx-linux/2.22/distro/ubuntu22.04-server/sgx_linux_x64_sdk_${PSW_VERSION}.bin && \
     chmod +x sgx_linux_x64_sdk_${PSW_VERSION}.bin && \
     echo 'yes' | ./sgx_linux_x64_sdk_${PSW_VERSION}.bin"
 
 # Installing Linux SGX SDK
 RUN apt-get update && apt-get install -y --no-install-recommends \
-    libsgx-urts=${PSW_VERSION}-focal1 \
+    libsgx-urts=${PSW_VERSION}-jammy1 \
     libsgx-qe3-logic=${DCAP_VERSION} \
     libsgx-pce-logic=${DCAP_VERSION} \
     libsgx-dcap-ql=${DCAP_VERSION} \
     libsgx-dcap-ql-dev=${DCAP_VERSION} \
     libcurl4-openssl-dev \
     libsgx-dcap-default-qpl=${DCAP_VERSION} \
-    libsgx-quote-ex=${PSW_VERSION}-focal1
+    libsgx-quote-ex=${PSW_VERSION}-jammy1
 
 COPY --from=build_base /app/dist/applications_security_amber_trustauthority_client_for_python-1.1.0-py3-none-any.whl .
 RUN pip install applications_security_amber_trustauthority_client_for_python-1.1.0-py3-none-any.whl

inteltrustauthorityclient/examples/sgx_sample_app/README.md

@@ -91,9 +91,9 @@ The Intel SGX attestation sample application can be encapsulated as a container,
 
 ```sh
 cat <<EOF | tee .env
-UBUNTU_VERSION=20.04
+UBUNTU_VERSION=22.04
 TRUST_AUTHORITY_CLIENT_VERSION=v1.1.0
-DCAP_VERSION=1.19.100.3-focal1
+DCAP_VERSION=1.19.100.3-jammy1
 PSW_VERSION=2.22.100.3
 ADAPTER_TYPE="sgx"
 EOF

inteltrustauthorityclient/examples/tdx_sample_app/README.md

@@ -88,7 +88,7 @@ The Intel TDX attestation sample can be encapsulated as a container, enabling it
 
 ```sh
 cat <<EOF | tee .env
-UBUNTU_VERSION=24.04
+UBUNTU_VERSION=22.04
 TRUST_AUTHORITY_CLIENT_VERSION=v1.1.0
 EOF