Nathan A Phelps

https://github.com/open-horizon/anax/blob/227013d58c907e31dd710aad78e36547374f670b/pkg/rpm/horizon/horizon.spec#L107 ``` root@fedora pkgs]# echo "*/5 * * * * root /usr/horizon/bin/agent-auto-upgrade.sh 2>&1|/usr/bin/logger -t AgentAutoUpgrade" > /etc/cron.d/horizon_agent_upgrade bash: /etc/cron.d/horizon_agent_upgrade: No such file or directory [root@fedora pkgs]# mkdir /etc/cron.d [root@fedora pkgs]#...

Horizon rpm package is installing podman when it should not.

2

https://github.com/open-horizon/anax/blob/227013d58c907e31dd710aad78e36547374f670b/pkg/rpm/horizon/horizon.spec#L18 The `requires` field of the rpm specification file is auto parsed for required dependencies to install. Adding any known good packages here that the package manager can grab will...

[BUG] CVEs in v1.1.9

2

**Describe the bug** Several open CVEs in this project's dependency graph. CVE-2024-34750 ``` org.apache.tomcat.embed tomcat-embed-core 10.1.9 ``` CVE-2024-50379 ``` org.apache.tomcat.embed tomcat-embed-core 10.1.9 ``` CVE-2023-22102 ``` com.mysql mysql-connector-j 8.0.33 ``` CVE-2024-7254...

### Describe the bug. 1) The base image is version `3.7`. This was last updated June 19, 2019. https://github.com/open-horizon/anax/blob/69bc5f7323ccba1dd35c9adb47f006b4ca54245b/anax-in-container/Dockerfile.alpine.amd64#L1 2) This Dockerfile references `microdnf` to work with packages, but Alpine...