MongoDB upgrade - question

[mtcolman]

Is this a BUG REPORT or FEATURE REQUEST?

Choose one: FEATURE REQUEST

(not sure if this is a feature request or not...)

Mongo Dockerfile is using a very old (2 years) version of MongoDB.

This version is then being used litmus 3.0.0 (e.g. here: https://github.com/litmuschaos/litmus/blob/master/mkdocs/docs/3.0.0-beta4/litmus-3.0.0-beta4.yaml#L823),

I've just done a local scan of the image using trivy: trivy i litmuschaos/mongo:4.2.8 and it shows:

litmuschaos/mongo:4.2.8 (ubuntu 18.04)

Total: 374 (UNKNOWN: 0, LOW: 144, MEDIUM: 215, HIGH: 15, CRITICAL: 0)

Is it possible to move to the latest numbered verison: 6.0.4 - https://hub.docker.com/layers/library/mongo/6.0.4/images/sha256-3c8dd1b08f8a2ec0338902affd432b40130e5acf49d6e3a1ca05ff5168100059?context=explore to reduce the vulnerability count?

This would involve changes to:

• https://github.com/litmuschaos/test-tools/blob/master/custom/mongo/Dockerfile
• https://github.com/litmuschaos/test-tools/blob/master/custom/mongo/buildscripts/push

(Possbily just changing 4.2.8 references to 6.0.4).

I then don't know how/who needs to make the required change on litmuschaos to specify the new containers use?

Thanks!