Update postgres:17.3-alpine Docker digest from 17.3 to 17.3-alpine (docker-compose.yml)

[renovate]

This PR contains the following updates:

Package	Update	Change
postgres	digest	63d02e4 -> 80d3d7d

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dryrunsecurity]

DryRun Security Summary

A Docker configuration update revealed multiple security vulnerabilities including exposed credentials, default admin settings, unrestricted network access, and sensitive information exposure in the docker-compose.yml file.

Expand for full summary

PR updates PostgreSQL Docker image SHA256 hash in docker-compose.yml from an old hash to a new hash, with routine image digest update. Multiple critical security vulnerabilities discovered:

1. Exposed Credentials in docker-compose.yml:

• Hardcoded PostgreSQL password: POSTGRES_PASSWORD: ${DD_DATABASE_PASSWORD:-defectdojo}
• Hardcoded Django Secret Key: DD_SECRET_KEY: \"${DD_SECRET_KEY:-hhZCp@D28z!n@NED*yB!ROMt+WzsY*iq}\"
• Hardcoded Credential Encryption Key: DD_CREDENTIAL_AES_256_KEY: \"${DD_CREDENTIAL_AES_256_KEY:-&91a*agLqesc*0DJ+2*bAbsUZfR*4nLw}\"

2. Default Admin Configuration Risks:

• Predictable admin user: DD_ADMIN_USER: \"${DD_ADMIN_USER:-admin}\"
• Default admin email: DD_ADMIN_MAIL: \"${DD_ADMIN_USER:-admin@defectdojo.local}\"

3. Network Exposure Vulnerability:

• DD_ALLOWED_HOSTS set to *, permitting connections from any host

4. Sensitive Information Exposure:

• Environment variables contain unprotected sensitive configuration details

5. Lack of Security Isolation:

• No network segmentation or service communication security constraints defined

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

View PR in the DryRun Dashboard.

[mtesauro]

Approved