forked from claw/flaskpaste
containerfile: pin pip>=25.3 to fix CVE-2025-8869
This commit is contained in:
@@ -16,7 +16,7 @@ RUN apk add --no-cache gcc musl-dev libffi-dev
|
||||
# Create virtual environment and upgrade pip
|
||||
RUN python -m venv /opt/venv
|
||||
ENV PATH="/opt/venv/bin:$PATH"
|
||||
RUN pip install --no-cache-dir --upgrade pip wheel
|
||||
RUN pip install --no-cache-dir --upgrade "pip>=25.3" wheel
|
||||
|
||||
# Install Python dependencies
|
||||
COPY requirements.txt .
|
||||
|
||||
Reference in New Issue
Block a user