test: update image scanning snapshots

[G-Rath]

I feel like ideally this shouldn't actually be in the Java test, but potentially eliminating it is out of my wheelhouse :)

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 69.30%. Comparing base (fd2ef0f) to head (494107c).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1592      +/-   ##
==========================================
- Coverage   69.31%   69.30%   -0.02%     
==========================================
  Files         200      200              
  Lines       19033    19033              
==========================================
- Hits        13193    13190       -3     
- Misses       5133     5135       +2     
- Partials      707      708       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[another-rex]

I think ideally I'll find a JRE image that I can pin this to. Installing the package in the lockfile causes changes to the image every build.

[G-Rath]

Replying to:

          Hmm it looks like the container image is not consistent every build, I'll fix it in another PR.

Originally posted by @another-rex in #1579 (comment)

Not sure if I missed something in particular that made you think "inconsistent" rather than "new vulnerability just dropped", but fwiw I noticed the Java Dockerfile includes doing apt update and apk update` which could make things more "flakey" ...

I think ideally I'll find a JRE image that I can pin this to. Installing the package in the lockfile causes changes to the image every build.

Snap, that's where I was heading too (I think)

[another-rex]

Just looking here: https://osv.dev/list?q=openssl&ecosystem=Alpine The latest one published by alpine is published Jan 20th. Maybe a new affected version could have been added more recently though.