diff --git a/lambda/check-view-security-option/Dockerfile b/lambda/check-view-security-option/Dockerfile index 681c462a..cb6dd9fb 100644 --- a/lambda/check-view-security-option/Dockerfile +++ b/lambda/check-view-security-option/Dockerfile @@ -5,7 +5,12 @@ ENV TZ="Asia/Tokyo" WORKDIR ${WORKDIR} COPY Pipfile Pipfile.lock ${WORKDIR} -RUN pip install pipenv --no-cache-dir && \ +RUN \ + apt update -y && \ + # パッケージのセキュリティアップデートのみを適用するコマンド + apt install -y unattended-upgrades && \ + unattended-upgrades && \ + pip install pipenv --no-cache-dir && \ pipenv install --system --deploy && \ pip uninstall -y pipenv virtualenv-clone virtualenv COPY check-view-option ./ diff --git a/lambda/check-view-security-option/check-view-option/main.py b/lambda/check-view-security-option/check-view-option/main.py index 252fc262..c75862a0 100644 --- a/lambda/check-view-security-option/check-view-option/main.py +++ b/lambda/check-view-security-option/check-view-option/main.py @@ -185,6 +185,7 @@ def fetch_view_security_options(connection: Database, check_target_schemas: list try: with connection.query(select_view_security_option_sql) as cursor: result = cursor.fetchall() + connection.close() return result except Exception as e: raise QueryExecutionException('E-04-01', f'Viewセキュリティオプションチェックに失敗しました エラー内容:{e}')