Merge pull request #196 from kaleido-io/docker-trivy-install-fix

bump dependencies for cve fixes and fix docker file trivy install

Author: EnriqueL8

Dockerfile

@@ -22,7 +22,7 @@ FROM alpine:3.19 AS sbom
 WORKDIR /
 ADD . /SBOM
 RUN apk add --no-cache curl 
-RUN curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin latest
+RUN curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin
 RUN trivy fs --format spdx-json --output /sbom.spdx.json /SBOM
 RUN trivy sbom /sbom.spdx.json --severity UNKNOWN,HIGH,CRITICAL --exit-code 1
 

package-lock.json

@@ -86,7 +86,7 @@
   },
   "overrides": {
     "ws": ">=8.17.1",
-    "multer": "2.0.2",
+    "multer": "2.1.1",
     "form-data": "4.0.4"
   }
 }