Impact of Log4j exploit on Atlantis?

[freola]

Hello!

Do anyone now if/how atlantis is impacted of the Log4Shell/Log4j vulnerability (CVE-2021-44228)

[chenrui333]

@freola I just did a docker scan, and did not find any vulnerabilities with the latest atlantis docker image, let me know if that works.

$ docker scan ghcr.io/runatlantis/atlantis:latest

Testing ghcr.io/runatlantis/atlantis:latest...

Organization:      chenrui
Package manager:   apk
Project name:      docker-image|ghcr.io/runatlantis/atlantis
Docker image:      ghcr.io/runatlantis/atlantis:latest
Platform:          linux/amd64
Base image:        alpine:3.15.0
Licenses:          enabled

✓ Tested 38 dependencies for known issues, no vulnerable paths found.

According to our scan, you are currently using the most secure version of the selected base image