Merge pull request #17 from catenax-ng/feature/release1.2.0

security fixes

CHANGELOG.md

@@ -7,11 +7,14 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 ## [Unreleased]
 
 
-## [1.1.6] - 2023-03-13
+## [1.2.0] - 2023-03-14
+
+### Fixed
+ - Security issues fixed
+ - Snakeyaml jar issue fixed
+ - veracode security issue fixed
 
 ### Changed
- - Security fixes
- - Snakeyaml jar fixed
  - Supports EDC connector 0.1.6
  - Changed base image to eclipse-temurin
 

INSTALL.md

@@ -4,7 +4,7 @@ Helm charts are provided inside https://github.com/eclipse-tractusx/autosetup-ba
 
  - Using helm commands <br />
 
-How to install application using helm:-
+How to install application using helm:-  <br />
     helm install ReleaseName ChartName
 
     a.) Add helm repository in tractusx:-

pom.xml

@@ -11,7 +11,7 @@
 	</parent>
 	<groupId>org.eclipse.tractusx</groupId>
 	<artifactId>auto-setup</artifactId>
-	<version>0.0.8</version>
+	<version>1.2.0</version>
 	<name>auto-setup</name>
 	<description>auto-setup</description>
 	<properties>
@@ -284,4 +284,4 @@
 			</snapshots>
 		</repository>
 	</repositories>
-</project>
+</project>

src/main/resources/application.properties

@@ -30,7 +30,8 @@ spring.security.oauth2.resourceserver.jwt.issuer-uri=${resourceServerIssuer}
 management.endpoint.health.probes.enabled=true
 management.health.readinessstate.enabled=true
 management.health.livenessstate.enabled=true
-management.endpoints.web.exposure.include=*
+management.security.enabled=true
+management.endpoints.web.exposure.include=/actuator/health/readiness,/actuator/health/liveness
 spring.lifecycle.timeout-per-shutdown-phase=30s
 logging.level.org.springframework.security.web.csrf=INFO