DEVOPS-2804 Update docker scout creds

[nedvna]

No description provided.

[github-actions]

Overview

Image reference	wallarm/node:latest	node-x86_64.tar
- digest	69e78a93cfb4	7186f2b523c8
- tag	latest
- provenance	2010096	git-673b4fc
- vulnerabilities
- platform	linux/amd64	linux/amd64
- size	246 MB	274 MB (+29 MB)
- packages	331	331
Base Image	alpine:3 also known as: • 3.20 • 3.20.1 • latest	alpine:3 also known as: • 3.20 • 3.20.1 • latest
- vulnerabilities

Labels (2 changes)

• ± 2 changed
• 8 unchanged

 com.wallarm.nginx-docker.versions.aio=4.10.8
 com.wallarm.nginx-docker.versions.alpine=3.20
 com.wallarm.nginx-docker.versions.gomplate=3.11.7
 com.wallarm.nginx-docker.versions.nginx=1.26.1
 org.opencontainers.image.documentation=https://docs.wallarm.com/installation/inline/compute-instances/docker/nginx-based
-org.opencontainers.image.revision=git-2010096
+org.opencontainers.image.revision=git-673b4fc
 org.opencontainers.image.source=https://github.com/wallarm/docker-wallarm-node
 org.opencontainers.image.title=Docker official image for Wallarm Node. API security platform agent
 org.opencontainers.image.vendor=Wallarm
-org.opencontainers.image.version=4.10.8-1
+org.opencontainers.image.version=test

[github-actions]

🔍 Vulnerabilities of node-x86_64.tar

📦 Image Reference node-x86_64.tar

digest	sha256:7186f2b523c82bc2b793e401976bfd22fce586dd1a7565caf35385a99b6e41b0
vulnerabilities
size	274 MB
packages	331

📦 Base Image alpine:3

also known as	3.20 3.20.1 latest
digest	sha256:dabf91b69c191a1a0a1628fd6bdd029c0c4018041c7f052870bb13c5a222ae76
vulnerabilities

setuptools 68.0.0 (pypi) pkg:pypi/[email protected] Improper Control of Generation of Code ('Code Injection') Affected range <70.0.0 Fixed version 70.0.0 CVSS Score 8.8 CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H EPSS Score 0.04% EPSS Percentile 9th percentile Description A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.